﻿<?xml version="1.0" encoding="utf-8"?>
<saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_6fc401c8-17b2-48bc-8962-6b2ff78c9a63" IssueInstant="2015-03-18T09:23:14.507Z" xmlns:xs="http://www.w3.org/2001/XMLSchema" Version="2.0">
  <saml2:Issuer Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">urn:brz:sts</saml2:Issuer>
  <saml2:Subject>
    <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:unspecified">John Musteradministrator</saml2:NameID>
    <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
      <saml2:SubjectConfirmationData />
    </saml2:SubjectConfirmation>
  </saml2:Subject>
  <saml2:Conditions NotBefore="2015-03-18T09:23:14.507Z" NotOnOrAfter="2015-03-18T13:23:14.507Z">
    <saml2:AudienceRestriction>
      <saml2:Audience>https://elga-online.at/ETS</saml2:Audience>
    </saml2:AudienceRestriction>
  </saml2:Conditions>
  <saml2:AuthnStatement AuthnInstant="2015-03-18T09:23:14.507Z">
    <saml2:AuthnContext>
      <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac.classes:x509</saml2:AuthnContextClassRef>
    </saml2:AuthnContext>
  </saml2:AuthnStatement>
  <saml2:AttributeStatement>
    <saml2:Attribute FriendlyName="XSPA Subject" Name="urn:oasis:names:tc:xacml:1.0:subject:subject-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
      <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">John Musteradministrator</saml2:AttributeValue>
    </saml2:Attribute>
    <saml2:Attribute FriendlyName="XSPA Organization" Name="urn:oasis:names:tc:xspa:1.0:subject:organization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
      <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Bundesrechenzentrum</saml2:AttributeValue>
    </saml2:Attribute>
  </saml2:AttributeStatement>
  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
      <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
      <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
      <Reference URI="#_6fc401c8-17b2-48bc-8962-6b2ff78c9a63">
        <Transforms>
          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
          <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
            <InclusiveNamespaces PrefixList="xs" xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" />
          </Transform>
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
        <DigestValue>FmZtBRUqBAg/+kAvsGNXr59TwPt4bbXF1zUJs7ZWgKw=</DigestValue>
      </Reference>
    </SignedInfo>
    <SignatureValue>O2Gryv2wenLTCXt80BCt28lR6K4JvpwgGguJkY6Ze0e1PdwbuByF9wtuVV+K8Milf+gjvpuhq9FdFcCNS3lM+2Qewr0lewQLJyABgPtqnAVPaMRgQ0x2KtuYPfqyfbRKKxojRvoEwgtGmK10WU7RGTYDvvL6EKWeg41VTxdX7fGHQCVbH9a8bhCHv7+A624vv4w8iw1qMQ/bHepYFv4GI17aNO5jKyHDWfLmHNp7fpc/ZY1lIyfwbo/2yEZjDDxoSH7LJ+2A+eyx6wSxMeyVeQDLgY4WYeRqDpSWMMw07VEYZ2jhire2yW5C6PxHDmBVS5AITWGfGaoz5wU/KzZQ3w==</SignatureValue>
    <KeyInfo>
      <X509Data>
        <X509Certificate>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</X509Certificate>
      </X509Data>
    </KeyInfo>
  </Signature>
</saml2:Assertion>