<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response
    Destination="https://demo.egiz.gv.at/demologin-pvp2-sso/app_B/securearea.action"
    ID="_00f86ad627b2048f22d9a248a240b1dc"
    InResponseTo="_454bc65a5880fc4d66f3a9bb62c72774"
    IssueInstant="2015-04-21T12:12:11.860Z" Version="2.0"
    xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <saml2:Issuer
        Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://demo.egiz.gv.at/demoportal_moaid-2.0</saml2:Issuer>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:SignedInfo>
            <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
            <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
            <ds:Reference URI="#_00f86ad627b2048f22d9a248a240b1dc">
                <ds:Transforms>
                    <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
                    <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                        <ec:InclusiveNamespaces PrefixList="xs" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                    </ds:Transform>
                </ds:Transforms>
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                <ds:DigestValue>0B3TxGGqIVetdHjUZ7yMD/IBhQL/L1XXy6Cy8KwnEf4=</ds:DigestValue>
            </ds:Reference>
        </ds:SignedInfo>
        <ds:SignatureValue>AqYbMo1T6rmW9T81Mh3OMtIbP/oO45BI22Coz09H9HddIFTcrTJVAzU5zgj83sIa+eFpdX7jaleADfc3nhNYUaX2/2YAt+nCrSUPaMBysTp7AaKqjI7Yr4BeXl1K/ZwjGYyjiGej0/AoqxvtKRfYQyBzC8HRyALTsUmogyDDGX5iOy79nCUh6jKetqdZ5kiFYUbRCZ8ZfYJtasNO5UhHdrEKqpJoQrrZs1UMHNgJP0Zv2lQqUj+dEOFp1iqbTsBNsED3jeBYZlwTn4zDlrweAy0neBcz4rk6gDe0Mw399ESjlP5TvWtMqNi5U4SKDKLfY/cmbRnBHoFJuEZhlh2NLQ==</ds:SignatureValue>
        <ds:KeyInfo>
            <ds:X509Data>
                <ds:X509Certificate>MIIDFTCCAf0CBFUBnL4wDQYJKoZIhvcNAQELBQAwTzELMAkGA1UEBhMCQVQxDTALBgNVBAcMBEdy
                    YXoxDTALBgNVBAoMBEVHSVoxIjAgBgNVBAMMGU1PQS1JRCBJRFAgKFRlc3QtVmVyc2lvbikwHhcN
                    MTUwMzEyMTQwMzQyWhcNMTcxMjA1MTQwMzQyWjBPMQswCQYDVQQGEwJBVDENMAsGA1UEBwwER3Jh
                    ejENMAsGA1UECgwERUdJWjEiMCAGA1UEAwwZTU9BLUlEIElEUCAoVGVzdC1WZXJzaW9uKTCCASIw
                    DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIJv0qe9UdvFYSL5I02GokwEVfsIGc7I7EhVNOxY
                    9mtUenmhqNrLsLBFg1IiPbk0ISWhORwPyVp/P3+GyGP339qZ68UCGV361E0Qm7cjPe/O3+r3HAM2
                    ZBN8oAZoHmphrNS6fKfY58kygtrUa+ZyMzYWTTiS32SCM8H55bluEFbeZksnbP0Y94IjkfJdgvzl
                    MxzrlSyoV2ymWBjvS5welDHgbCKyjsjIhTRjJu/olGJyen01/EpIVtSyDXO/2IS2v2O9UiFwAoyB
                    YAjPnl3HxK2A577nR63MxlgP0/s+r84uBqOAlb4qnbpU7lu5GxlCPkZmpRooCQYURioC+wjS6lMC
                    AwEAATANBgkqhkiG9w0BAQsFAAOCAQEABqO7kkq/gRahAvpsQg5LLZROGFr9pIPryN9xmJGgPo7j
                    KNl7rs7gNS0lmuluYWWnJcwAPbwFeb954VMB9x9p9QEw5RnXamUY9qa0LgcS/t/WX6vJkZPNhWph
                    8bXwh0MvlsbfrvDTJr8cjH3qfxITp7pa3xb1qE7suRffVUdDXawiXXnWJ/WJr+twVVHHEqnZz1lA
                    rSDLxM8sCjG8DeJw8vnQy5mPGrGVTBba4upc8UTY1nPV9U2GBJVYuAkoVRjbTlNvrL5JqNqypKcG
                    bejjWxgrzZkeQeU2hFcjunmgwGZ+ug2fq4kKkQftwcqeJTzyzBoo2+Oo4Tmfbsh/onxPWA==</ds:X509Certificate>
            </ds:X509Data>
        </ds:KeyInfo>
    </ds:Signature>
    <saml2p:Status>
        <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
    </saml2p:Status>
    <saml2:Assertion ID="_3246fcba11f472a9ef3e969dca6db0a3"
        IssueInstant="2015-04-21T12:12:11.860Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
        <saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://demo.egiz.gv.at/demoportal_moaid-2.0</saml2:Issuer>
        <saml2:Subject>
            <saml2:NameID
                Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="urn:publicid:gv.at:cdid+GH">GH:9OJcfFwAv68ok27DI8ECwK263cQ=</saml2:NameID>
            <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
                <saml2:SubjectConfirmationData
                    InResponseTo="_454bc65a5880fc4d66f3a9bb62c72774"
                    NotOnOrAfter="2015-04-21T12:30:32.462Z" Recipient="https://demo.egiz.gv.at/demologin-pvp2-sso/app_B/securearea.action"/>
            </saml2:SubjectConfirmation>
        </saml2:Subject>
        <saml2:Conditions NotBefore="2015-04-21T12:12:11.860Z" NotOnOrAfter="2015-04-21T12:30:32.462Z">
            <saml2:AudienceRestriction>
                <saml2:Audience>www.elga-online.gv.at</saml2:Audience>
                <saml2:Audience>https://elga-online.at/ETS</saml2:Audience>
            </saml2:AudienceRestriction>
        </saml2:Conditions>
        <saml2:AuthnStatement AuthnInstant="2015-04-21T12:12:11.860Z" SessionIndex="_3f1cada3cfc9686cddc5d06f20374675">
            <saml2:AuthnContext>
                <saml2:AuthnContextClassRef>http://www.ref.gv.at/ns/names/agiz/pvp/secclass/2</saml2:AuthnContextClassRef>
            </saml2:AuthnContext>
        </saml2:AuthnStatement>
        <saml2:AttributeStatement>
            <saml2:Attribute FriendlyName="PVP-VERSION"
                Name="urn:oid:1.2.40.0.10.2.1.1.261.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">2.1</saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute FriendlyName="PRINCIPAL-NAME"
                Name="urn:oid:1.2.40.0.10.2.1.1.261.20" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">ALJWBohlmann ELGATest</saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute FriendlyName="GIVEN-NAME" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Annette Ivonne</saml2:AttributeValue>
            </saml2:Attribute>            
            <saml2:Attribute FriendlyName="BPK"
                Name="urn:oid:1.2.40.0.10.2.1.1.149" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">GH:9OJcfFwAv68ok27DI8ECwK263cQ=</saml2:AttributeValue>
            </saml2:Attribute>            
            <saml2:Attribute FriendlyName="EID-ISSUING-NATION"
                Name="urn:oid:1.2.40.0.10.2.1.1.261.32" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">AT</saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute FriendlyName="EID-SECTOR-FOR-IDENTIFIER"
                Name="urn:oid:1.2.40.0.10.2.1.1.261.34" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">urn:publicid:gv.at:cdid+GH</saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute FriendlyName="EID-CCS-URL"
                Name="urn:oid:1.2.40.0.10.2.1.1.261.64" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">https://127.0.0.1:3496/https-security-layer-request</saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute FriendlyName="EID-SIGNER-CERTIFICATE"
                Name="urn:oid:1.2.40.0.10.2.1.1.261.66" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">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</saml2:AttributeValue>
            </saml2:Attribute>            
        </saml2:AttributeStatement>
    </saml2:Assertion>
</saml2p:Response>
