<?xml version="1.0" encoding="UTF-8"?>
<!--
  Sample SAML 2.0 Response with an encrypted assertion (decoded, before Base64 encoding).
  Values in {braces} are placeholders. Field definitions and requirements: saml-attributes.md

  The assertion is AES-encrypted, and the AES key is RSA-encrypted with Expedia's public key.
  Destination is required when destination validation is enabled for the partner.
-->
<saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
                 xmlns:saml2a="urn:oasis:names:tc:SAML:2.0:assertion"
                 ID="{responseId}"
                 IssueInstant="{yyyy-MM-ddTHH:mm:ssZ}"
                 Version="2.0"
                 Destination="https://{PARTNER_TRAVEL_DOMAIN}/sso/{PARTNER_NAME}">
    <saml2a:Issuer>{PARTNER_IDP_ENTITY_ID}</saml2a:Issuer>
    <saml2p:Status>
        <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
    </saml2p:Status>
    <saml2a:EncryptedAssertion>
        <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
                            Id="{encryptedDataId}"
                            Type="http://www.w3.org/2001/04/xmlenc#Element">
            <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <xenc:CipherData>
                <xenc:CipherValue>{Base64 AES-encrypted saml:Assertion}</xenc:CipherValue>
            </xenc:CipherData>
        </xenc:EncryptedData>
        <xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
            <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
            <xenc:CipherData>
                <xenc:CipherValue>{Base64 AES key, RSA-encrypted with Expedia's public key}</xenc:CipherValue>
            </xenc:CipherData>
            <xenc:ReferenceList>
                <xenc:DataReference URI="#{encryptedDataId}"/>
            </xenc:ReferenceList>
        </xenc:EncryptedKey>
    </saml2a:EncryptedAssertion>
</saml2p:Response>
