title: SAML assertion with username/password - what do the messages really look like?
body: <p>I need to create a some SAML 2.0 assertions, and I'm having trouble finding what the XML should really look like.  Most of the documentation seems to be about using particular tools, not about the messages. I've got the schemas, with a plethora of possibilities, but I can't find an example of what the relevant messages actually look like in practice.</p>
  
  <p>The business rule says: in order to create a shared identity, the user tells system A their username and password on system B. System A needs to communicate this info (along with some demographics) to system B. System B validates the information and passes back a unique identifier which can then be used to refer to this user.</p>
  
  <p>Could someone give me an example of what SAML 2.0 assertions would look like to carry this information?</p>
  
  <p>FWIW, I'm using C#, and need to pass the XML around in ways which preclude using a 3rd-party tool.</p>