
_START_ARTICLE_
SAML 2.0
_START_SECTION_
SAML断言举例
_START_PARAGRAPH_
<saml:Assertion_NEWLINE_   xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"_NEWLINE_   xmlns:xs="http://www.w3.org/2001/XMLSchema"_NEWLINE_   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"_NEWLINE_   ID="b07b804c-7c29-ea16-7300-4f3d6f7928ac"_NEWLINE_   Version="2.0"_NEWLINE_   IssueInstant="2004-12-05T09:22:05Z">_NEWLINE_   <saml:Issuer>https://idp.example.org/SAML2</saml:Issuer>_NEWLINE_   <ds:Signature_NEWLINE_     xmlns:ds="http://www.w3.org/2000/09/xmldsig#">...</ds:Signature>_NEWLINE_   <saml:Subject>_NEWLINE_     <saml:NameID_NEWLINE_       Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_NEWLINE_       3f7b3dcf-1674-4ecd-92c8-1544f346baf8_NEWLINE_     </saml:NameID>_NEWLINE_     <saml:SubjectConfirmation_NEWLINE_       Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">_NEWLINE_       <saml:SubjectConfirmationData_NEWLINE_         InResponseTo="aaf23196-1773-2113-474a-fe114412ab72"_NEWLINE_         Recipient="https://sp.example.com/SAML2/SSO/POST"_NEWLINE_         NotOnOrAfter="2004-12-05T09:27:05Z"/>_NEWLINE_     </saml:SubjectConfirmation>_NEWLINE_   </saml:Subject>_NEWLINE_   <saml:Conditions_NEWLINE_     NotBefore="2004-12-05T09:17:05Z"_NEWLINE_     NotOnOrAfter="2004-12-05T09:27:05Z">_NEWLINE_     <saml:AudienceRestriction>_NEWLINE_       <saml:Audience>https://sp.example.com/SAML2</saml:Audience>_NEWLINE_     </saml:AudienceRestriction>_NEWLINE_   </saml:Conditions>_NEWLINE_   <saml:AuthnStatement_NEWLINE_     AuthnInstant="2004-12-05T09:22:00Z"_NEWLINE_     SessionIndex="b07b804c-7c29-ea16-7300-4f3d6f7928ac">_NEWLINE_     <saml:AuthnContext>_NEWLINE_       <saml:AuthnContextClassRef>_NEWLINE_         urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport_NEWLINE_       </saml:AuthnContextClassRef>_NEWLINE_     </saml:AuthnContext>_NEWLINE_   </saml:AuthnStatement>_NEWLINE_   <saml:AttributeStatement>_NEWLINE_     <saml:Attribute_NEWLINE_       xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500"_NEWLINE_       x500:Encoding="LDAP"_NEWLINE_       NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"_NEWLINE_       Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1"_NEWLINE_       FriendlyName="eduPersonAffiliation">_NEWLINE_       <saml:AttributeValue_NEWLINE_         xsi:type="xs:string">member</saml:AttributeValue>_NEWLINE_       <saml:AttributeValue_NEWLINE_         xsi:type="xs:string">staff</saml:AttributeValue>_NEWLINE_     </saml:Attribute>_NEWLINE_   </saml:AttributeStatement>_NEWLINE_ </saml:Assertion>