<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Header />
<SOAP-ENV:Body>
<samlp:ArtifactResponse xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
ID="ID_9d27e4b7-2b0f-4d84-a161-9f1cc8515844"
InResponseTo="_e3593cfd37504206ba79fc141b172a1c" IssueInstant="2026-06-29T14:21:02.520Z"
Version="2.0">
<saml:Issuer>https://idp.id.hin.ch/auth/realms/hinid-dev</saml:Issuer>
<dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
<dsig:SignedInfo>
<dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
<dsig:SignatureMethod
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
<dsig:Reference URI="#ID_9d27e4b7-2b0f-4d84-a161-9f1cc8515844">
<dsig:Transforms>
<dsig:Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
<dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
</dsig:Transforms>
<dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
<dsig:DigestValue>j/IH+kjlNEjwlvEbGq6oq600uwLjefqPqIz3yvOS0ME=</dsig:DigestValue>
</dsig:Reference>
</dsig:SignedInfo>
<dsig:SignatureValue>
As...Y=
</dsig:SignatureValue>
<dsig:KeyInfo>
<dsig:KeyName>cSwuXJQqfGWT091-zA3jS5WqjxEMaBa17K34XJdFiXg</dsig:KeyName>
<dsig:X509Data>
<dsig:X509Certificate>
MI...YQ==
</dsig:X509Certificate>
</dsig:X509Data>
</dsig:KeyInfo>
</dsig:Signature>
<samlp:Status>
<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
</samlp:Status>
<samlp:Response Destination="https://example.com/"
ID="ID_95805684-d2ab-435d-a8bc-54afc2b0e4a2"
InResponseTo="hin-checker-36fe7b82-3623-4855-b2e1-5bf2242980ec"
IssueInstant="2026-06-29T14:21:02.520Z" Version="2.0">
<saml:Issuer>https://idp.id.hin.ch/auth/realms/hinid-dev</saml:Issuer>
<samlp:Status>
<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
</samlp:Status>
<saml:Assertion ID="ID_92e35e2f-d105-4748-ad0d-96ba8c9ae7da"
IssueInstant="2026-06-29T14:21:02.520Z" Version="2.0">
<saml:Issuer>https://idp.id.hin.ch/auth/realms/hinid-dev</saml:Issuer>
<dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
<dsig:SignedInfo>
<dsig:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
<dsig:SignatureMethod
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
<dsig:Reference URI="#ID_92e35e2f-d105-4748-ad0d-96ba8c9ae7da">
<dsig:Transforms>
<dsig:Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
<dsig:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
</dsig:Transforms>
<dsig:DigestMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
<dsig:DigestValue>ttVspe87LiDCnpohZCCOyV9PpMZZTU1HnIXxvD0P5Sc=</dsig:DigestValue>
</dsig:Reference>
</dsig:SignedInfo>
<dsig:SignatureValue>
BPdpoGfnSmvPo9TQxTzyHhYW9ARo0t15wqJn0zYkbixNF1LyaTbgmdtS+...=
</dsig:SignatureValue>
<dsig:KeyInfo>
<dsig:KeyName>cSwuXJQqfGWT091-zA3jS5WqjxEMaBa17K34XJdFiXg</dsig:KeyName>
<dsig:X509Data>
<dsig:X509Certificate>
MIII...vRpYQ==
</dsig:X509Certificate>
</dsig:X509Data>
</dsig:KeyInfo>
</dsig:Signature>
<saml:Subject>
<saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">
HIN_2bccb1493ea605b4094f6eb85c1a63791bf724b67aadbacb512ab5b023ce0099</saml:NameID>
<saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml:SubjectConfirmationData
InResponseTo="hin-checker-36fe7b82-3623-4855-b2e1-5bf2242980ec"
NotOnOrAfter="2026-06-29T14:26:00.520Z"
Recipient="https://example.com/" />
</saml:SubjectConfirmation>
</saml:Subject>
<saml:Conditions NotBefore="2026-06-29T14:21:00.520Z"
NotOnOrAfter="2026-06-29T14:26:00.520Z">
<saml:AudienceRestriction>
<saml:Audience>https://example.com/</saml:Audience>
</saml:AudienceRestriction>
</saml:Conditions>
<saml:AuthnStatement AuthnInstant="2026-06-29T14:21:02.520Z"
SessionIndex="61f59169-50eb-4d59-a48f-ad14dc007e5a::a821b99b-af11-4df6-bad3-70402386a033"
SessionNotOnOrAfter="2026-06-30T06:21:02.520Z">
<saml:AuthnContext>
<saml:AuthnContextClassRef>
urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>
</saml:AuthnContext>
</saml:AuthnStatement>
<saml:AttributeStatement>
<saml:Attribute FriendlyName="givenname"
Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Hans</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute FriendlyName="Global Location Number" Name="GLN"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">1245678910</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute FriendlyName="gender" Name="gender"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">MALE</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute FriendlyName="dateofbirth" Name="dateofbirth"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">1990-01-01+01:00</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute FriendlyName="surname"
Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xs:string">Mustermann</saml:AttributeValue>
</saml:Attribute>
</saml:AttributeStatement>
</saml:Assertion>
</samlp:Response>
</samlp:ArtifactResponse>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>