{
  "journey_id": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
  "status": "OK",
  "first_failure": "",
  "sources": [
    "sp_app"
  ],
  "events": [
    {
      "event_id": "evt_xp4PUWlyZo0iL_CnNXYnWdpo",
      "journey_id": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
      "timestamp": 1784562401.4223464,
      "application_id": "saml-a",
      "protocol": "SAML",
      "event": {
        "type": "SAML_AUTHN_REQUEST_CREATED",
        "status": "SUCCESS",
        "severity": "INFO"
      },
      "payload": {
        "source": "sp_app",
        "node": "saml-a",
        "saml_direction": "saml-a -> hub",
        "saml_message_type": "AuthnRequest",
        "request_id": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
        "destination": "https://hub.sabathe.eu/idp/SSO.saml2",
        "acs_url": "https://saml-a.sabathe.eu/saml/acs",
        "xml_pretty": "<?xml version=\"1.0\" ?>\n<samlp:AuthnRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\" Version=\"2.0\" IssueInstant=\"2026-07-20T15:46:41Z\" Destination=\"https://hub.sabathe.eu/idp/SSO.saml2\" ProtocolBinding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" AssertionConsumerServiceURL=\"https://saml-a.sabathe.eu/saml/acs\">\n  <saml:Issuer>https://saml-a.sabathe.eu/metadata</saml:Issuer>\n  <samlp:NameIDPolicy Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\" AllowCreate=\"true\"/>\n</samlp:AuthnRequest>",
        "xml_summary": {
          "Message": "AuthnRequest",
          "ID": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
          "Destination": "https://hub.sabathe.eu/idp/SSO.saml2",
          "IssueInstant": "2026-07-20T15:46:41Z",
          "Version": "2.0",
          "Issuer": "https://saml-a.sabathe.eu/metadata"
        }
      },
      "error": null
    },
    {
      "event_id": "evt_gxm3YK3oeYEnkl5_Keuiqd5O",
      "journey_id": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
      "timestamp": 1784562403.488946,
      "application_id": "saml-a",
      "protocol": "SAML",
      "event": {
        "type": "SAML_RESPONSE_RECEIVED",
        "status": "RECEIVED",
        "severity": "INFO"
      },
      "payload": {
        "source": "sp_app",
        "node": "saml-a",
        "saml_direction": "hub -> saml-a",
        "saml_message_type": "Response",
        "relay_state": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
        "response_preview": "<samlp:Response Version=\"2.0\" ID=\"oQS0VDP1YXbSIehlOtygYh.yzJW\" IssueInstant=\"2026-07-20T15:46:43.381Z\" InResponseTo=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\" Destination=\"https://saml-a.sabathe.eu/saml/acs\" xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\"><saml:Issuer xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\">https://hub.sabathe.eu</saml:Issuer><ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/><ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/><ds:Reference URI=\"#oQS0VDP1YXbSIehlOtygYh.yzJW\"><ds:Transforms><ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/><ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"",
        "xml_pretty": "<?xml version=\"1.0\" ?>\n<samlp:Response xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" Version=\"2.0\" ID=\"oQS0VDP1YXbSIehlOtygYh.yzJW\" IssueInstant=\"2026-07-20T15:46:43.381Z\" InResponseTo=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\" Destination=\"https://saml-a.sabathe.eu/saml/acs\">\n  <saml:Issuer xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\">https://hub.sabathe.eu</saml:Issuer>\n  <ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\">\n    <ds:SignedInfo>\n      <ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n      <ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/>\n      <ds:Reference URI=\"#oQS0VDP1YXbSIehlOtygYh.yzJW\">\n        <ds:Transforms>\n          <ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/>\n          <ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n        </ds:Transforms>\n        <ds:DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"/>\n        <ds:DigestValue>Q0VYKSJDxI9gWNWHK3Gy6xsvQiO/TS0nchZLcmVf1fE=</ds:DigestValue>\n      </ds:Reference>\n    </ds:SignedInfo>\n    <ds:SignatureValue>TLbwTNDMaPp/85EG96GmNa6f8fUwuq42QlESAP8VV8b1OBKqYUw/Ce16qgg4JIptJ0EQPGDzwMLVVZaiuzS+e2mJXjfkchbOb7ABrokGT5mGcKE6X8K/7PQ2LJ7bYjzIilaS+lsw6DwrMeXiV6+CJf2z35unHvBxzlZsSEK25Cb7zwQKU22CR0WdKJk4Pm9Q91ytn/yh6AYWYDEfKZBrPHVYuop7cpywMb4mUnvEL1oPF4Z/iIJPIzKEgDkdtu1V49OH6OHxFmd+u4dyhV64FrwEszisHv+1PD6YhMwJuKfzDSHfom/D9eRVldLRNOiL5MKjel2JnzZfXYysYQBSzQ==</ds:SignatureValue>\n    <ds:KeyInfo>\n      <ds:X509Data>\n        <ds:X509Certificate>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</ds:X509Certificate>\n      </ds:X509Data>\n    </ds:KeyInfo>\n  </ds:Signature>\n  <samlp:Status>\n    <samlp:StatusCode Value=\"urn:oasis:names:tc:SAML:2.0:status:Success\"/>\n  </samlp:Status>\n  <saml:Assertion xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"EPiJS.ZajyIYxSbKro.ZRC5FsZf\" IssueInstant=\"2026-07-20T15:46:43.384Z\" Version=\"2.0\">\n    <saml:Issuer>https://hub.sabathe.eu</saml:Issuer>\n    <ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\">\n      <ds:SignedInfo>\n        <ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n        <ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/>\n        <ds:Reference URI=\"#EPiJS.ZajyIYxSbKro.ZRC5FsZf\">\n          <ds:Transforms>\n            <ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/>\n            <ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n          </ds:Transforms>\n          <ds:DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"/>\n          <ds:DigestValue>tCvoBw2VO/O9vUXe6E+v+mCEeU9Fz1ID2LzlaQG5Vg4=</ds:DigestValue>\n        </ds:Reference>\n      </ds:SignedInfo>\n      <ds:SignatureValue>M3wyb5WKY6Dl3EhobvLP0Vg48nqjtXLHPs30yerwUo65HRV4+HpilJgNqu8PjB4zz/rCWqZ6MPq02UgB/oEikR5xRlEkeqzVCG0setpkdT2PyJqC/ajQ4f9UqK2wNOs+lg1z3vNurXSHSOQ5Tp1isO9F9R/+7U4mZurJplukzMhbRIcT/PM24wzwp3ay4bf96KlzAzapo4/jkoT5qYJ2q5c46koov6/2N5XsWG6zIt4hOHCJ7lij8t//LrDRy8jTnY+bQ8GRmx9hK3Q6Tg+AEe6AXMKZ6M9p4j7QX2Cws+slxQG0frtM9mOUPmZUBlzMFvHiZdRs1UG+09G0JpH8/A==</ds:SignatureValue>\n      <ds:KeyInfo>\n        <ds:X509Data>\n          <ds:X509Certificate>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</ds:X509Certificate>\n        </ds:X509Data>\n      </ds:KeyInfo>\n    </ds:Signature>\n    <saml:Subject>\n      <saml:NameID Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\">user1</saml:NameID>\n      <saml:SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\">\n        <saml:SubjectConfirmationData Recipient=\"https://saml-a.sabathe.eu/saml/acs\" NotOnOrAfter=\"2026-07-20T15:51:43.384Z\" InResponseTo=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\"/>\n      </saml:SubjectConfirmation>\n    </saml:Subject>\n    <saml:Conditions NotBefore=\"2026-07-20T15:41:43.384Z\" NotOnOrAfter=\"2026-07-20T15:51:43.384Z\">\n      <saml:AudienceRestriction>\n        <saml:Audience>https://saml-a.sabathe.eu/metadata</saml:Audience>\n      </saml:AudienceRestriction>\n    </saml:Conditions>\n    <saml:AuthnStatement SessionIndex=\"EPiJS.ZajyIYxSbKro.ZRC5FsZf\" AuthnInstant=\"2026-07-20T15:35:11.277Z\">\n      <saml:AuthnContext>\n        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>\n        <saml:AuthenticatingAuthority>https://idp.sabathe.eu/idp/hub2idp/no-mfa</saml:AuthenticatingAuthority>\n      </saml:AuthnContext>\n    </saml:AuthnStatement>\n    <saml:AttributeStatement>\n      <saml:Attribute Name=\"acr\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">urn:sabathe:iamlab:acr:no-mfa</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"authn_profile\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">no-mfa</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"source_idp\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">idp.sabathe.eu</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"amr\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">pwd</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"authn_context\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"email\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">user1@example.test</saml:AttributeValue>\n      </saml:Attribute>\n    </saml:AttributeStatement>\n  </saml:Assertion>\n</samlp:Response>",
        "xml_summary": {
          "Message": "Response",
          "ID": "oQS0VDP1YXbSIehlOtygYh.yzJW",
          "InResponseTo": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
          "Destination": "https://saml-a.sabathe.eu/saml/acs",
          "IssueInstant": "2026-07-20T15:46:43.381Z",
          "Version": "2.0",
          "Issuer": "https://hub.sabathe.eu",
          "StatusCode": "urn:oasis:names:tc:SAML:2.0:status:Success",
          "Assertion ID": "EPiJS.ZajyIYxSbKro.ZRC5FsZf",
          "NameID": "user1",
          "SessionIndex": "EPiJS.ZajyIYxSbKro.ZRC5FsZf",
          "Audience": "https://saml-a.sabathe.eu/metadata"
        },
        "session_status": "connected",
        "session_index": "EPiJS.ZajyIYxSbKro.ZRC5FsZf",
        "name_id": "user1"
      },
      "error": null
    }
  ],
  "exchanges": [
    {
      "id": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
      "label": "AuthnRequest \u00b7 saml-a -> hub",
      "source": "sp_app \u00b7 saml-a",
      "status": "OK",
      "events": [
        {
          "event_id": "evt_xp4PUWlyZo0iL_CnNXYnWdpo",
          "journey_id": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
          "timestamp": 1784562401.4223464,
          "application_id": "saml-a",
          "protocol": "SAML",
          "event": {
            "type": "SAML_AUTHN_REQUEST_CREATED",
            "status": "SUCCESS",
            "severity": "INFO"
          },
          "payload": {
            "source": "sp_app",
            "node": "saml-a",
            "saml_direction": "saml-a -> hub",
            "saml_message_type": "AuthnRequest",
            "request_id": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
            "destination": "https://hub.sabathe.eu/idp/SSO.saml2",
            "acs_url": "https://saml-a.sabathe.eu/saml/acs",
            "xml_pretty": "<?xml version=\"1.0\" ?>\n<samlp:AuthnRequest xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\" Version=\"2.0\" IssueInstant=\"2026-07-20T15:46:41Z\" Destination=\"https://hub.sabathe.eu/idp/SSO.saml2\" ProtocolBinding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" AssertionConsumerServiceURL=\"https://saml-a.sabathe.eu/saml/acs\">\n  <saml:Issuer>https://saml-a.sabathe.eu/metadata</saml:Issuer>\n  <samlp:NameIDPolicy Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\" AllowCreate=\"true\"/>\n</samlp:AuthnRequest>",
            "xml_summary": {
              "Message": "AuthnRequest",
              "ID": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
              "Destination": "https://hub.sabathe.eu/idp/SSO.saml2",
              "IssueInstant": "2026-07-20T15:46:41Z",
              "Version": "2.0",
              "Issuer": "https://saml-a.sabathe.eu/metadata"
            }
          },
          "error": null
        }
      ]
    },
    {
      "id": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
      "label": "Response \u00b7 hub -> saml-a",
      "source": "sp_app \u00b7 saml-a",
      "status": "OK",
      "events": [
        {
          "event_id": "evt_gxm3YK3oeYEnkl5_Keuiqd5O",
          "journey_id": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
          "timestamp": 1784562403.488946,
          "application_id": "saml-a",
          "protocol": "SAML",
          "event": {
            "type": "SAML_RESPONSE_RECEIVED",
            "status": "RECEIVED",
            "severity": "INFO"
          },
          "payload": {
            "source": "sp_app",
            "node": "saml-a",
            "saml_direction": "hub -> saml-a",
            "saml_message_type": "Response",
            "relay_state": "jrn_u8seQc7WSYZHxqBv-k3drWFu",
            "response_preview": "<samlp:Response Version=\"2.0\" ID=\"oQS0VDP1YXbSIehlOtygYh.yzJW\" IssueInstant=\"2026-07-20T15:46:43.381Z\" InResponseTo=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\" Destination=\"https://saml-a.sabathe.eu/saml/acs\" xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\"><saml:Issuer xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\">https://hub.sabathe.eu</saml:Issuer><ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/><ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/><ds:Reference URI=\"#oQS0VDP1YXbSIehlOtygYh.yzJW\"><ds:Transforms><ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/><ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"",
            "xml_pretty": "<?xml version=\"1.0\" ?>\n<samlp:Response xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\" Version=\"2.0\" ID=\"oQS0VDP1YXbSIehlOtygYh.yzJW\" IssueInstant=\"2026-07-20T15:46:43.381Z\" InResponseTo=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\" Destination=\"https://saml-a.sabathe.eu/saml/acs\">\n  <saml:Issuer xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\">https://hub.sabathe.eu</saml:Issuer>\n  <ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\">\n    <ds:SignedInfo>\n      <ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n      <ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/>\n      <ds:Reference URI=\"#oQS0VDP1YXbSIehlOtygYh.yzJW\">\n        <ds:Transforms>\n          <ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/>\n          <ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n        </ds:Transforms>\n        <ds:DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"/>\n        <ds:DigestValue>Q0VYKSJDxI9gWNWHK3Gy6xsvQiO/TS0nchZLcmVf1fE=</ds:DigestValue>\n      </ds:Reference>\n    </ds:SignedInfo>\n    <ds:SignatureValue>TLbwTNDMaPp/85EG96GmNa6f8fUwuq42QlESAP8VV8b1OBKqYUw/Ce16qgg4JIptJ0EQPGDzwMLVVZaiuzS+e2mJXjfkchbOb7ABrokGT5mGcKE6X8K/7PQ2LJ7bYjzIilaS+lsw6DwrMeXiV6+CJf2z35unHvBxzlZsSEK25Cb7zwQKU22CR0WdKJk4Pm9Q91ytn/yh6AYWYDEfKZBrPHVYuop7cpywMb4mUnvEL1oPF4Z/iIJPIzKEgDkdtu1V49OH6OHxFmd+u4dyhV64FrwEszisHv+1PD6YhMwJuKfzDSHfom/D9eRVldLRNOiL5MKjel2JnzZfXYysYQBSzQ==</ds:SignatureValue>\n    <ds:KeyInfo>\n      <ds:X509Data>\n        <ds:X509Certificate>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</ds:X509Certificate>\n      </ds:X509Data>\n    </ds:KeyInfo>\n  </ds:Signature>\n  <samlp:Status>\n    <samlp:StatusCode Value=\"urn:oasis:names:tc:SAML:2.0:status:Success\"/>\n  </samlp:Status>\n  <saml:Assertion xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\" ID=\"EPiJS.ZajyIYxSbKro.ZRC5FsZf\" IssueInstant=\"2026-07-20T15:46:43.384Z\" Version=\"2.0\">\n    <saml:Issuer>https://hub.sabathe.eu</saml:Issuer>\n    <ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\">\n      <ds:SignedInfo>\n        <ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n        <ds:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256\"/>\n        <ds:Reference URI=\"#EPiJS.ZajyIYxSbKro.ZRC5FsZf\">\n          <ds:Transforms>\n            <ds:Transform Algorithm=\"http://www.w3.org/2000/09/xmldsig#enveloped-signature\"/>\n            <ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\"/>\n          </ds:Transforms>\n          <ds:DigestMethod Algorithm=\"http://www.w3.org/2001/04/xmlenc#sha256\"/>\n          <ds:DigestValue>tCvoBw2VO/O9vUXe6E+v+mCEeU9Fz1ID2LzlaQG5Vg4=</ds:DigestValue>\n        </ds:Reference>\n      </ds:SignedInfo>\n      <ds:SignatureValue>M3wyb5WKY6Dl3EhobvLP0Vg48nqjtXLHPs30yerwUo65HRV4+HpilJgNqu8PjB4zz/rCWqZ6MPq02UgB/oEikR5xRlEkeqzVCG0setpkdT2PyJqC/ajQ4f9UqK2wNOs+lg1z3vNurXSHSOQ5Tp1isO9F9R/+7U4mZurJplukzMhbRIcT/PM24wzwp3ay4bf96KlzAzapo4/jkoT5qYJ2q5c46koov6/2N5XsWG6zIt4hOHCJ7lij8t//LrDRy8jTnY+bQ8GRmx9hK3Q6Tg+AEe6AXMKZ6M9p4j7QX2Cws+slxQG0frtM9mOUPmZUBlzMFvHiZdRs1UG+09G0JpH8/A==</ds:SignatureValue>\n      <ds:KeyInfo>\n        <ds:X509Data>\n          <ds:X509Certificate>MIIDizCCAnOgAwIBAgIGAZ9xL5RoMA0GCSqGSIb3DQEBCwUAMHcxCzAJBgNVBAYTAkZSMQwwCgYDVQQIEwNJREYxDjAMBgNVBAcTBVBhcmlzMRQwEgYDVQQKEwtTYWJhdGhlIExhYjEbMBkGA1UECxMSSUFNIEZlZGVyYXRpb24gTGFiMRcwFQYDVQQDEw5odWIuc2FiYXRoZS5ldTAeFw0yNjA3MTcxNzQ2MTFaFw0zNjA3MTQxNzQ2MTFaMHcxCzAJBgNVBAYTAkZSMQwwCgYDVQQIEwNJREYxDjAMBgNVBAcTBVBhcmlzMRQwEgYDVQQKEwtTYWJhdGhlIExhYjEbMBkGA1UECxMSSUFNIEZlZGVyYXRpb24gTGFiMRcwFQYDVQQDEw5odWIuc2FiYXRoZS5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkzQFXYAjWGfkZqnUBgyNVib44sARZYz2M0yH3wXtSLybHKjWkWjo0SzRg4pX9TUrEP29LOeiQTzEukFAoIHWYRdlmQ/mAJopEljUjWXJeflNuF3nBWA/esv3w2ugdztkVSUvA++pGQZYcZ4eQxQjodOaD3BQIHmZXDrezo0Yuw/GcuPXO+knjxF6/vAAwJ2G04TXt5kFlfIWPOXcEZaSACBXrZrb2C550DG4H73jKLCMORFCion2R31VTKwegM8/iCPqmJTPp11PYyrR2hrlgU5AGAPBxWUVimTcb15zNbyUvzUeQYM0/+K9An6EWkhU6VUYT1Qf6Joqx0SG6mFQsCAwEAAaMdMBswGQYDVR0RBBIwEIIOaHViLnNhYmF0aGUuZXUwDQYJKoZIhvcNAQELBQADggEBABsZ7FpVwEzO8VFu2Kzi1kbpIZm6WCgqPgBYf0djQRxgHn02kIGmk/kdfnp3jeX/0MLXbv0SnoJ3hkc4nWQzUVycTd6osxpm69JFQ03mMk7mnzSz79TCpK42g6WCqDyoWQ0h1wIfLOVO0CFtRO+trI2UfN8cQF8Dw49ZtKkBA6kfmrXlBCyAbcktQ87OCoDk3ErC+PaFFfAqUTwywFwGtsXG1mSBI/OTrW8Ul+JnZwF4Cs8d+gfIy7Ehkp6lWWTqikMIocidVjrqPdZXSQlAXhN/sVSngdvxjSJ6sbn2JQx4k2lTypauwlsqsHkJ7AUpKUi+1TQZOH4xhaiqV7lglfk=</ds:X509Certificate>\n        </ds:X509Data>\n      </ds:KeyInfo>\n    </ds:Signature>\n    <saml:Subject>\n      <saml:NameID Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\">user1</saml:NameID>\n      <saml:SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\">\n        <saml:SubjectConfirmationData Recipient=\"https://saml-a.sabathe.eu/saml/acs\" NotOnOrAfter=\"2026-07-20T15:51:43.384Z\" InResponseTo=\"_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68\"/>\n      </saml:SubjectConfirmation>\n    </saml:Subject>\n    <saml:Conditions NotBefore=\"2026-07-20T15:41:43.384Z\" NotOnOrAfter=\"2026-07-20T15:51:43.384Z\">\n      <saml:AudienceRestriction>\n        <saml:Audience>https://saml-a.sabathe.eu/metadata</saml:Audience>\n      </saml:AudienceRestriction>\n    </saml:Conditions>\n    <saml:AuthnStatement SessionIndex=\"EPiJS.ZajyIYxSbKro.ZRC5FsZf\" AuthnInstant=\"2026-07-20T15:35:11.277Z\">\n      <saml:AuthnContext>\n        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>\n        <saml:AuthenticatingAuthority>https://idp.sabathe.eu/idp/hub2idp/no-mfa</saml:AuthenticatingAuthority>\n      </saml:AuthnContext>\n    </saml:AuthnStatement>\n    <saml:AttributeStatement>\n      <saml:Attribute Name=\"acr\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">urn:sabathe:iamlab:acr:no-mfa</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"authn_profile\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">no-mfa</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"source_idp\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">idp.sabathe.eu</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"amr\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">pwd</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"authn_context\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AttributeValue>\n      </saml:Attribute>\n      <saml:Attribute Name=\"email\" NameFormat=\"urn:oasis:names:tc:SAML:2.0:attrname-format:basic\">\n        <saml:AttributeValue xmlns:xs=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"xs:string\">user1@example.test</saml:AttributeValue>\n      </saml:Attribute>\n    </saml:AttributeStatement>\n  </saml:Assertion>\n</samlp:Response>",
            "xml_summary": {
              "Message": "Response",
              "ID": "oQS0VDP1YXbSIehlOtygYh.yzJW",
              "InResponseTo": "_C0_9sZYXPU2PFeUPTU5yqY-eFEGmia68",
              "Destination": "https://saml-a.sabathe.eu/saml/acs",
              "IssueInstant": "2026-07-20T15:46:43.381Z",
              "Version": "2.0",
              "Issuer": "https://hub.sabathe.eu",
              "StatusCode": "urn:oasis:names:tc:SAML:2.0:status:Success",
              "Assertion ID": "EPiJS.ZajyIYxSbKro.ZRC5FsZf",
              "NameID": "user1",
              "SessionIndex": "EPiJS.ZajyIYxSbKro.ZRC5FsZf",
              "Audience": "https://saml-a.sabathe.eu/metadata"
            },
            "session_status": "connected",
            "session_index": "EPiJS.ZajyIYxSbKro.ZRC5FsZf",
            "name_id": "user1"
          },
          "error": null
        }
      ]
    }
  ]
}