===  ECP Issues HTTP Request to Service Provider ===

Request:
  url = https://jdennis-test.example.com/saml-test/protected.html
  method = GET
  Headers:
    Accept: text/html, application/vnd.paos+xml
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    PAOS: ver="urn:liberty:paos:2003-08";"urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp"
    User-Agent: python-requests/2.20.0

Response:
  Status = 200
  Headers:
    Cache-Control: private, max-age=0, must-revalidate
    Connection: Keep-Alive
    Content-Length: 3671
    Content-Type: application/vnd.paos+xml
    Date: Mon, 19 Aug 2019 17:01:32 GMT
    Keep-Alive: timeout=5, max=100
    Server: Apache/2.4.39 (Fedora) OpenSSL/1.1.1c

=== Process PAOS request from SP ===
SP PAOS Request Info:
  response_consumer_url: https://jdennis-test.example.com/mellon/paosResponse
  message_id: _C34F09A942C9F30AE90363152835B3BA
  is_passive: false
  issuer: https://jdennis-test.example.com/mellon/metadata
  relaystate: https://jdennis-test.example.com/saml-test/protected.html
  authn_request:
    <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:paos="urn:liberty:paos:2003-08" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_AB402BBC8309B06129BD6BDD65C392DE" Version="2.0" IssueInstant="2019-08-19T17:01:32Z" Destination="https://jdennis-test.example.com/mellon/paosResponse" Consent="urn:oasis:names:tc:SAML:2.0:consent:current-implicit" ForceAuthn="false" IsPassive="false" AssertionConsumerServiceURL="https://jdennis-test.example.com/mellon/paosResponse">
      <saml:Issuer>https://jdennis-test.example.com/mellon/metadata</saml:Issuer>
      <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
    <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <Reference URI="#_AB402BBC8309B06129BD6BDD65C392DE">
    <Transforms>
    <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
    <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    </Transforms>
    <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <DigestValue>HwEwrr4VWI5oiEOcQ3IndH3pJrkTFdvJMoyB6heZ5fs=</DigestValue>
    </Reference>
    </SignedInfo>
    <SignatureValue>KuBh0zLieJCIm4SSBTwzf8/I18xsMuo1TbtK+dijwH9onQC9Bn4cK618uddfrAAr
    Krri8JHUvbSeZFp9bEVLvXhLX+krrhLq/kkOXVSJOvLu5nuLNE2gKm4Xthr+QZlR
    tbZVgk9f1kFsbSQ7bVSUPThJkw1He2t9KYRF0Zsaiu0cNvGgEAom6DUxdYM7IPf8
    HFtrU+t2OfAq5wwNOoQziKybb/e+TPaRJWeftY0ODinaHgozcuP2VHMuX0NFwZgy
    2EDhIvMH1GHFGneSIXWqHBIMXdZEV9rDc5Hs7I9hVje0fTFTG9HVUSoLGwgkHalk
    CtTDoHejdyXbQkqC57miSg==</SignatureValue>
    <KeyInfo>
    <X509Data>
    <X509Certificate>MIIDHDCCAgSgAwIBAgIJAPaxVBaHw2CAMA0GCSqGSIb3DQEBCwUAMCMxITAfBgNV
    BAMMGGpkZW5uaXMtdGVzdC5leGFtcGxlLmNvbTAeFw0xODA4MTQyMzE0MTFaFw0y
    MzA4MTMyMzE0MTFaMCMxITAfBgNVBAMMGGpkZW5uaXMtdGVzdC5leGFtcGxlLmNv
    bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANuxHoQJZfMynQM8larz
    9xlRikPenU8FJeEIeQ8UVVbs5PpINcshRSCxK/8ru4iDX+ZIjk4LG05uggzatRDC
    PvUBZllRXWrMzzz62o0hww+eOqoskupl0joU7+FN+cMuZH33cdN7nBlYa+yNRI+z
    DzhUWgAWnMu5lN8m0b5jzEbEnmzkB92hj9oLQdyUH4ZjwLRg1C4GXF9dFhoqmqZv
    szPk98AJgDJU8P13H2uPOmwwIfvm67Ik/zMS/8q4hpsmh0qjPQUFOrypN7SW58sT
    85jpe63dg1Vm8MnU12Xv6DFTqYJZ+zrwD7lt0E6ntA6Or6/buEPXfkpsa4kzI9Kt
    hl0CAwEAAaNTMFEwHQYDVR0OBBYEFHNBhzSnOjg+/BDNERD0H54Ao+vuMB8GA1Ud
    IwQYMBaAFHNBhzSnOjg+/BDNERD0H54Ao+vuMA8GA1UdEwEB/wQFMAMBAf8wDQYJ
    KoZIhvcNAQELBQADggEBALFpgbFs8O+u8JQ1UNTtqXBB8K2mtws5gcGVqEuOmiUC
    GkqZqvKYjRGdGc0ZyWQD0RJ6a51jWC/Fl9fTcrFngujMX7jWinTGhL66f9LpreD0
    UwcRetUVP4SBGKuXEdAdxiTf4ZsIDLjFqRZozfqNvPO6aLO1iUpts6HeuiZaudJt
    n0GL33YVNz22uA2B7vkcqFoveHa05TuobTTVy6V0a/jv/P5JhL9+JTP/1ev5JFsf
    Gr5M188iCHyh6QVU45fltn6b5dL4haxNhYZOXfMjS3cjA5Nvz3sivIufj4uJtfD/
    UtBOi1NQHUyhnBDBCtkqM50vV3yeWkvnMSk7hxMYvAk=</X509Certificate>
    </X509Data>
    </KeyInfo>
    </Signature>
      <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" AllowCreate="true"/>
    </samlp:AuthnRequest>


=== ECP Determines Identity Provider ===
Using IdP endpoint: https://jdennis-test.example.com:8443/auth/realms/test/protocol/saml

=== ECP sends <AuthnRequest> to IdP with authentication ===

Request:
  url = https://jdennis-test.example.com:8443/auth/realms/test/protocol/saml
  method = POST
  Headers:
    Accept: */*
    Accept-Encoding: gzip, deflate
    Authorization: Basic amRvZTpkb3JhbWU=
    Connection: keep-alive
    Content-Length: 3024
    Content-Type: text/xml
    User-Agent: python-requests/2.20.0

Response:
  Status = 200
  Headers:
    Connection: keep-alive
    Content-Length: 13104
    Content-Type: application/octet-stream
    Date: Mon, 19 Aug 2019 17:01:32 GMT
    P3P: CP="This is not a P3P policy!"
    Set-Cookie: AUTH_SESSION_ID=05d962a3-ee5a-44d3-9f60-dc25dcbe2d5e.jdennis; Version=1; Path=/auth/realms/test/; HttpOnly, KC_RESTART=; Version=1; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/test/; HttpOnly, KC_RESTART=; Version=1; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/test/; HttpOnly, KEYCLOAK_IDENTITY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI5OTQ4ZjZhOC02YzgwLTQ5MDktYTFmMi1jNjU0YmI1ODgyOTcifQ.eyJqdGkiOiJmMDJhNjlmMS1jOTVhLTQ5MmItYjc1Zi02YWMzMGMzZmEwMTciLCJleHAiOjE1NjYyNzAwOTIsIm5iZiI6MCwiaWF0IjoxNTY2MjM0MDkyLCJpc3MiOiJodHRwczovL2pkZW5uaXMtdGVzdC5leGFtcGxlLmNvbTo4NDQzL2F1dGgvcmVhbG1zL3Rlc3QiLCJzdWIiOiI4NmNiYTNmZC00Y2IwLTQxMGMtYWQxYy0zYjM5NWNmNTlmNTAiLCJhdXRoX3RpbWUiOjAsInNlc3Npb25fc3RhdGUiOiIwNWQ5NjJhMy1lZTVhLTQ0ZDMtOWY2MC1kYzI1ZGNiZTJkNWUiLCJyZXNvdXJjZV9hY2Nlc3MiOnt9LCJzdGF0ZV9jaGVja2VyIjoiMm1RbGg0RjlrWTJON1k5d3ZMdF9UdTNtWEtyQW1iX3E0YVRiMXlMbUZhYyJ9.cwOLcfjyUjFuDEPZviZENfbujSanPNbOPYH-bRMI4tA; Version=1; Path=/auth/realms/test/; HttpOnly, KEYCLOAK_SESSION=test/86cba3fd-4cb0-410c-ad1c-3b395cf59f50/05d962a3-ee5a-44d3-9f60-dc25dcbe2d5e; Version=1; Expires=Tue, 20-Aug-2019 03:01:32 GMT; Max-Age=36000; Path=/auth/realms/test/, KEYCLOAK_REMEMBER_ME=; Version=1; Comment=Expiring cookie; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/test/; HttpOnly

=== Processed response from IdP ===
IdP SOAP Response Info:
  SAML Status Code: urn:oasis:names:tc:SAML:2.0:status:Success
  SAML Status Code 2: None
  SAML Status Message: None
  SAML Status Detail: None
  idp_assertion_consumer_url: https://jdennis-test.example.com/mellon/paosResponse
  idp_request_authenticated: True
  SAML Response:
    <samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Destination="https://jdennis-test.example.com/mellon/paosResponse" ID="ID_a5de8f11-4b90-44d1-95d9-17e03df4781a" InResponseTo="_AB402BBC8309B06129BD6BDD65C392DE" IssueInstant="2019-08-19T17:01:32.924Z" Version="2.0">
      <saml:Issuer>https://jdennis-test.example.com:8443/auth/realms/test</saml:Issuer>
      <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:SignedInfo>
          <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          <dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
          <dsig:Reference URI="#ID_a5de8f11-4b90-44d1-95d9-17e03df4781a">
            <dsig:Transforms>
              <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
              <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
            </dsig:Transforms>
            <dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
            <dsig:DigestValue>xvUpzij/UTOAihYoIutAq1+qYFsvh09nyyoCwOUTdvY=</dsig:DigestValue>
          </dsig:Reference>
        </dsig:SignedInfo>
        <dsig:SignatureValue>AqotGV0ssCsckkvN5aouc/lo4r79nlKrGT8Vm3xCM0Y/yBzzRCN8eXdzaslO8WPX/Rg4a7NxflfO&#13;
    xC+WdHMUavlTWgBMBWT60yTXFv3qXw9usio9OoCSReYyl1EXfAdXEjiQgGSkkbTGqXC+ILdKyCDg&#13;
    0Q2e/uTwh1RGy+wTYQL0/ciAU5L29RTORS9nM13m/IFlRHRBD8FWSAHGegkdOz5BLwH+BezwJWlE&#13;
    uC9r/jtG82NEfVO6OZQnb4090D6QZnuafoI4ljT60r1WQCPw44YVeAAhWFB9XiHjkejAT2fAMnZN&#13;
    hPNCbM2G0qALOdscyqu/FuhgJBHZ1jKUd23low==</dsig:SignatureValue>
        <dsig:KeyInfo>
          <dsig:KeyName>Hkki4TCNFFywLlp50Yx9luUgeg4G60HSTov3eaecvSw</dsig:KeyName>
          <dsig:X509Data>
            <dsig:X509Certificate>MIIClzCCAX8CBgFpJePdczANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTE5MDIy&#13;
    NTE4MTk0NFoXDTI5MDIyNTE4MjEyNFowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEB&#13;
    BQADggEPADCCAQoCggEBAMz3X7gh2+piYwSFrm4ACRWM1sLEuDv/kJ8fjnnlbR9Rx5zfLIes/vsY&#13;
    AZ1HqYVoG/hhPHbNFyQEG9PCtLCDLbXUb8H+a9QAmDQbe/HHpicc0yGlsYNVEd+luXAqJ18nBNnj&#13;
    odbnT7XSChMzKx368uEdstAmSuE7bXMwG07zlK0W33gra9MdZUnYRzf/Y/7hlQJdm6n+W5oWb0Uy&#13;
    iDJDrfhZRglbRYGuDhJTMqw7GEnZK3RUMcAzfoLeEP3Z5vkJT6T+CMlb+d+CBzmijNAZ4OoiZV8l&#13;
    l0PV10BC4Q8eX0hqOyP+8DQ+xvdepQjPW2CnPKngpZA+qROkYbOXG5wRQ38CAwEAATANBgkqhkiG&#13;
    9w0BAQsFAAOCAQEAh4HYLOdKJOAd3gl0M/pnCvSxAbkP8FU6+Wp/3MFtmq7fd8FnE8IO2ec1ERT6&#13;
    OcDIBMZXN/uQvv1xvbHgcUNgE/4IQxQ8Bg6K3gUbss8cR6b5xymLaIvuHmff5OT5Z0I+i8ilMCl2&#13;
    UpHmzvtM8wh8zC0FcWyTbxJcvbu/rjD8DKHxd9/N8X+EmyYgYhzjoQ5MHGwvYcj3wFdIDE2ukZvy&#13;
    4ov8FDwCdsVgRb7eHtUj/NsmHOTTJ/9PTi/a7OW4l1C4vr41OYsKEvQH3tCNxDBRJNF7+VvH9sCZ&#13;
    nHhLRNlxGuRjpfwu0AJRiuacKsccIPj19qo2MgRgiUWV8lPWmJCMyQ==</dsig:X509Certificate>
          </dsig:X509Data>
          <dsig:KeyValue>
            <dsig:RSAKeyValue>
              <dsig:Modulus>zPdfuCHb6mJjBIWubgAJFYzWwsS4O/+Qnx+OeeVtH1HHnN8sh6z++xgBnUephWgb+GE8ds0XJAQb&#13;
    08K0sIMttdRvwf5r1ACYNBt78cemJxzTIaWxg1UR36W5cConXycE2eOh1udPtdIKEzMrHfry4R2y&#13;
    0CZK4TttczAbTvOUrRbfeCtr0x1lSdhHN/9j/uGVAl2bqf5bmhZvRTKIMkOt+FlGCVtFga4OElMy&#13;
    rDsYSdkrdFQxwDN+gt4Q/dnm+QlPpP4IyVv534IHOaKM0Bng6iJlXyWXQ9XXQELhDx5fSGo7I/7w&#13;
    ND7G916lCM9bYKc8qeClkD6pE6Rhs5cbnBFDfw==</dsig:Modulus>
              <dsig:Exponent>AQAB</dsig:Exponent>
            </dsig:RSAKeyValue>
          </dsig:KeyValue>
        </dsig:KeyInfo>
      </dsig:Signature>
      <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
      </samlp:Status>
      <saml:EncryptedAssertion>
        <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
          <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
            <xenc:EncryptedKey>
              <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
              <xenc:CipherData>
                <xenc:CipherValue>AbDdoph8tNqbllI1C5psC0yr5eOQkdThDcXAMURFPpYjuX6OYooL4y/hBK5Kuf8rmFpkhb74+3AP&#13;
    nOYwq8DY1F6o7izJAVy//S/njKrBqsJpektuGj35l58TnOb7GbWrZnQeaVl05Fi79v+upsUUG3Ls&#13;
    cgKHLH7zagWe6S6jXnIK1FeQKX5zgSzOjfXc7KYiyNK2OllgnblJPseehBdlF7NcaZEqQLYPWgXg&#13;
    Lwa+bDcGOVr2dGAQtPvY1Qiw4d/R4Ks3yo34a9Hq/P9Np3/sdWis+Q7dT6y4fyMIcM1rLbGBd6UV&#13;
    0F7zhzfUEAwolsnwXzvWTftcQ9AG+9a21NBBuw==</xenc:CipherValue>
              </xenc:CipherData>
            </xenc:EncryptedKey>
          </ds:KeyInfo>
          <xenc:CipherData>
            <xenc:CipherValue>KZBIoH6Jg1837wBQKBTT4wpQdXTxeRkPZzgqOnxvczAjH00zIHEnOhrP+1LI08sPZM2GgNDVOHGG&#13;
    n+H3j6Oz3mZGhgeiXE8iIiPmhoA6D3ry17OvT/nNOvg6R8lYcb6Y+zdl2jXb3qDduBndd0xG7ct9&#13;
    pKrfr6fCwleQFCu1FRoSa1om5rFSvqWqMZlD8lksdlni7Oz5cGrl6yrEI0RGvxxURvvOg+ewIud5&#13;
    PR6U9LpsLoOufA6Jes4+fqjSWwMXdP++YTefGZVxieIQV7LbDo6u+fhT7vbkwwFP3uEh4wyZWSzP&#13;
    Rzfk/2hXhjF8PUnNwC0VTZukPZJ/MknnIFqMXkxpcuJOjbmtZH4ckhuUYfUtODFus3yJVzy+U8d2&#13;
    rXqvHFdFvvZrLLXfLZWp2AETxX5GRFa9dNGDPq3sxAuSoBtH5Ep9byvIi+y8PvJXqsu+HzX36RUD&#13;
    MS0eYs9LCuGcdArUiY6vrtyBrrJDsh/cDsdbXhZI/Hx/s5vLIQCjWARvnggY9C5To++8VA2QCnBA&#13;
    gegRfcVEmywCQwZj8OGhqCQ4V/mrwpWufCjt53daef6GXkKb3oL2mKcnMu+dT7zuWPPQt6HZ/w2p&#13;
    UCAIm2xiRA3Gxv+Nwp8n3ENIFedZts/JS4ABaCDMT6WP8gBK4J0U3CBL9A2w3sw8mlLWLigTyRI9&#13;
    SdYBOXlyjrV2x59tOKAIg6WuebQfPLLELePTv9tFTJGNLruQWzKH4MrAVc8xBRB4yCukKIY2ZekG&#13;
    OMjxU2eIfog4QNVheag6t6bSbsHDgGCfWhsMADGFg66tbzv8wtbNP2hdKGev0l72+TjXPe3KWhZv&#13;
    x1/Sl78umbJ2ej85j8Sx910ohf4EKHEHAQTrG4uVxWAYwZh8wef/K2p/hQsWpsHlbTa5C1Iv2yBg&#13;
    LFwGddQqEVBSwKNhcjo77X02StMPE2OF6zpff7/c0ljELbGA//FuISaGazDFMvBtYrDIn0l9EZYQ&#13;
    R0cEZBHccObCYvm8m+0LH6Talhrw9igapFFeXGElYFQeTtlLVp9YlwS7efsAcCY2+Iqe5BaPVrZv&#13;
    K99PTvd3XTi4ml+lwZ4NbrxbCVs3hx4iLIKXh9MEY+Ue0PLbdT/H25MyYqTZCs6olcauMConhnXY&#13;
    h7Uj2rsYkC0nhfJkJPPwmU/TZVw8LmEeFuzqczDqNcr581p2ilroo+ObJWMFMr5zaDYGbEm9KCzY&#13;
    fgc+/8YFFTMQeQreP2d7+gz0mR6PjCV2kHP4QHlZBatlG9+ojxStOzuj9TsaossikiGeOTnKvCjN&#13;
    9PYsU/LaImjC9RDjWVZiknOXY4fgKO1tqDqlRQqs9SRrGFLKeyY5/pUP6d0eqFU/bPh+hEez6jZ7&#13;
    QE16HqL+Bn5GWEpYuwcM+EXTiDaDmScLdme4tVBcXpDScgnjn/lEobb83hewfA1Dd1DDU4fMM9uw&#13;
    VkmcddkbiFlsZvLxBx8u6v/DLV0RKFuZKaJ1typ+g+UnRcAAXtX9XsiOCR/KueJ4LMb8p3K7avsg&#13;
    WtBfwF+0XadZE+tdpiB5lTXSwtifCY6YbUlwHnYmgBTuOgrmonRko/wK9jPfEhzNB00m8GHJRK/y&#13;
    467BCNuPL5fG9dwgBUqyUwLTWuOk03ea3B3Sd6dZqLzQgLgtUoIEwVcA8viXKl+n9x7lB4bMRFzX&#13;
    zUYQOmgZe5vq5cISjg7MINrnww9xJVoAUpTqVz4FJLCOT6qClOJ1n59Dub+yPiPmfxqENwGKfLFL&#13;
    O38WOPHj+A5kKl3Y/yhmLqqnuI1fDs/50BqpHAYM4CCF3PO013r4LSkFp7xnpJ5UHLFa+G4jXXBW&#13;
    CR6aQaGNj01ia+DJ7i5eILpYNoOXU33XRCYzViopQSZWg9GwFKxGL1QWMZLzhN5ET7gm5li3XYPH&#13;
    Llg8QDqVL1wJkru5Xh/5hv/qqHJ/cDxqeyw5itIMqmv9LcpKRVWpxfrts1NC3bWS17ebqfTwBWO8&#13;
    G0bweUnKaqfP2C8ew0iRdwuFiQ/5JOlZAuW/rUoEfaJ14YGwL8fUqhXEs22RDLV6uRn0IKKIFx8i&#13;
    36u2ynPvCHV2jFlUZ+fg9RJmxES1Au6w01bJve8mGtm/mIKZqjVZlESQtnVPwvk69RxKUkLc6GpD&#13;
    67xazRr3fx20srHN1B17pgX2DMbvcHQUWvxiOZkzM0UAvXADygkxMsfA3CD7Qoau5o5sM3T7RMi2&#13;
    HXL82kTyabNvZ9Kdr6uvqw4y+pG8pekPi7GATBUqyQ6Sc/rTG7bwEvYzPiaWkHGM3C/qryPfE49V&#13;
    69dxkgMsUbBQtakXPCFYZrxcIkAjbh3hA659OYeIcLSCx7RkHocwO0Szd63r1vDn1Rpv2s9wfMWB&#13;
    TBc+fgsflz6VN7a7olrc7UL7p8kKvrncciZvVq8tciz1At9AOqSf5VOInOvDY/BdvV06UqNBs5RI&#13;
    69s1pqW8O2yc14R/lOvrJZxyKbXLoqpZtJOgHT+zvPxvzWawVgwCrUppexPyUsDH1FZwaBfkCXSK&#13;
    x98LIMhIZbSeagFI1xnaAwfOdZbdUkmsvnXTPfpFL7I6M/B0Srk1CuJlCQ515myGfcQYQx+u3gac&#13;
    pbnL2yLP57/Q6QcsXpMRMsCs/Xdz1j5ksLqalmLUEhz6hjHWWTOgTq/LDIMJ+UxBAA1E9SuR3vyp&#13;
    7EBYUZ1AA9zG5+iZxsu/p/zL6aSBIRLJ4ixi5M5Eckk5kXDe+D/q6+Sz/Rfy1ASVbEdx6Q7j4cpp&#13;
    R2GvjvNuwiEdHUaqmR5/QmIIPl+/7gAVM0KQ0/Zt5vFeguwdZvB+Z2JAhTAI3iKk6gVmBlPsdIJs&#13;
    DAef31zYgxf8pfkMcJ1jrmywsuUFebkUguwOdAnQDopcJN/rwoJaJu0trcB1LNC/ouSXpNge+Zd+&#13;
    aaD5hksV1ZRRV99GzpKqtzMJCNj3jK4En/O7Vu8kvJ7cd3goI2vwAH1INKgqErnA+F2iSQAg8e9m&#13;
    F1bUbwSyOnSRe+a4z5pe0mjBt2hHL0X9p46EKBnJrIj4kaC9NZxYz9Yz3a6fYF1CAJ040LJigIIq&#13;
    vz5CagDdreaIpvy+yQLQIZdDzxayxjEB+UJV8D88d3ydmKW9/mPuyscHnN/9xVhaMxlU7o6UaXUP&#13;
    xCbzhTvK3YsWL7Y0megZLOKQPzedPQckbqg70rfuJWkRBhSsqaPgu1QLBEFEe1dYART2w1h4wMgk&#13;
    p5ktdp2bBcSPkgt0jPZGuBYHAndSKpOsrhWEZYKUkmPbqxgAw4iyNojJHN2PQD+vcKVoraCwmdI+&#13;
    nAuu8owiS7whCM1uFCBYHdyxlH9dIkEC/ueA2tnyVw73fZrQ6cvhbtlw7uhGDrn/zAB47/zpcwcI&#13;
    I67Ij2+qHFsMt4DHpVUebBzP0use/d8zavGvGQoih0rKL3D5wYjpTCFnmSKSPn66YyhA4FaEudUk&#13;
    XOe4T+fAm4cLEapJIi+i4NkfvUU3kbvevB62GDuOHbme8safqAzQQK5H1CarNaWUrgEXAznRnmyE&#13;
    Ml6XevjUlhyVZ05F0M6Uni4XPSkv7F9AfwxrYB7pMH6mRHio3wakcqYZSSg11SF6MIRBUkG7j/RY&#13;
    miRvcpVvcvM7mpoSM4COIIZ7joFQ6L/9+Rz8vxox3dWP18Nqi4oZzrXGGnk/i9k2oD+Pv06JEbBp&#13;
    A/eSS7jWUr9R327H3taN7qwh7mAr0+XDHXIROueMAsw5wL/VMATb0Gx4qQFpSf98oEu5hIX5zOcd&#13;
    Ki9FYfJp1l2y5T3f+5UChyiaX8U7ZirYxi3HR1oRMTaPFTEk6Je5CPlfRbN7kFJmuPB3MtK4Zn+U&#13;
    8Kf5tBVI3MOJC/jIL5D+xydaHAitN26kFcH0rUBQ23eoL81PXP/BVW5urPHSMBZvgkdguEWLKszu&#13;
    UN2yT2rTIFUdKwrcXWJWDmz51ptjrZaYCpP8YfQM/QJziqsPrg98qB9wq2KRSIBr+BY7cMdR+DcO&#13;
    DhPdTBaWPlOAv6vdgJqxNrmL/nX34o6f8IJ1dhxYl5pzIjuNqbBxKa3+iKnOfZZPJrn7X5C7SLq0&#13;
    mR6YylMV+htDY4kNhPMwXWZ6sOCP+BoHgGgdczrgHKdO1pepH4t/bKe/flLoi4xVK7UjbjJC0B/o&#13;
    bUmKFnH/oeuhZcsldK2aWhq7LmZBGSiOzzrn1CsUcN4cOzyyg5vyldbeaVKlo1T2W0hFn+u8Nk7p&#13;
    N4W9q7zD7Xgh1ZBFsY3eZCsBuOI5QpdqnOLsovOjN9pDJyz2GtU/rqeci0FTbQBoZBV72Q4sNVu2&#13;
    K/Dxoz2DqV5w3bV+9iEHj0GtbsGA2VdSFAgpT94Lx6dytRaL0jmmcu7j9Ht3zwSdVSgdQivz/R5U&#13;
    Heb5KpmlTo+Bkre87XBUsiwKHgatuLtcnCk8gPC4TYTpDuT5mY+rTSjKAdLyEte7fY4otopx8v+w&#13;
    StBONZQDSu7sUq2rWiVuAHT62YpdbTCpvlQ05GSGWAEmfCG9/Oxls0ZD7xYoKWB8h/qGzur8CoGQ&#13;
    NI7K7CC/1O2XdeQakjC2UXDDyCVLXi6PuJQN0VE0a+MkbhRQVVm/mYuk0CRYQNQqX2K0cJQHls9U&#13;
    T8keTlPkWzcHCsPmWcUOYVeCN2aigIX6eDJ32Dr1+WCtrzI77AuM/ZvGz1ihPXHuF1K/wuzAYDHl&#13;
    +g6ipneb7rkTDKaen/+Xb3BHSXdQCPYTnmqZLvwqWFwaHO/IkLsQWv8K58f0autS+il9QcchZMBR&#13;
    kTVjLUMIg70/Fluc2OXuyOKYIlRKjaom1tmhK89uokB0/WmfUThJFipEN3gFedvi8iQ+JnEf5gnQ&#13;
    UADCdtTCnRVJts2u/Lv2VlE0ysfeAsEH4GMsP588Zg6DaQWUm01Yjry/U3OmJ7dBHSQv2/3Tx50Y&#13;
    JsGz9pnL0oUDMna3nxLcoHdZa14Y6U2cq5NN3zhGNvqLAF6TP2m5htskJHkDQlPayBwaMCQ3m49C&#13;
    GcFvn811kAsMjP3i+ZlU1XgeCFS8sPqcayCf1CfYDwm0aff/HzU0j4zM4K1D+q/Li37IDrnQTFDi&#13;
    xuvsw5JD0rxes0b43tvJXQorIrXVIo+xtDB1Q9NmSvUfFeF+brhlOQzO7JTDQYNZj9NNqNEPGrAV&#13;
    LVIKYhLGX7kOpVpBLErp6KIYv7dL1NEqe0REd7ewxY0FHvma/1VG4SXBCcYqPokfaQzHVCN11BMe&#13;
    P14AqP4FrGzp+fnqqx2v773Z0i/iHSxt+uEPbh+6lr6eCtYFB094DS8ok7Cuycd60lif9L8pTXca&#13;
    j4h1uTfKV6KSvtDqWdBY4wdS4u6vhebAzfF7HuUyzthVhxjAYUp5lTVhEJZYjgtKpn6hmW/euNYJ&#13;
    bbA1+DC/+DtXJ2UcNfwP1azPymmQQKoAgDnk0f7czZctfNhfzHL7Y8QSFeDWaDYWr6W+bpghmKCf&#13;
    27v6vaRBQkPsfZcYfUPHc6oDRkhlUrdbL3N4dWE58D/eQCP2uPHiPX8PRrXRMiiLUYvYP4ZKOlAg&#13;
    FoT4Czz/5008kPFzOCU9Dn0Th8u3ABdiOto9zqn1yNfwnT6W2Xb/5uoT/K7SjKZw5JeQr5wj1xDI&#13;
    Bh5Mlr0/P59eKH/9OarcTDkyWjhVU2Fq9MiFhKkhSuF0Y/NFnKUXpM6LFzDFmSSlc0MnBDVUFLPI&#13;
    UxODz8HmL1rsq2jSWU+66fWdnXq5H+neVTOrBbzy8Bbce/GmY1iSdxx9i3sGrla2/iBcQM2MsG5Q&#13;
    CPk+g09/bqgpkeEjZFCRT4IbQ9Qjs3mT9uQbmFGacLiNi2DEunt3FA5IEqyXj7R94jidi8RxzE5m&#13;
    arZG64uTNN640fbniuknYxeruMXyxNk4ZcGWvhH3eh3HPWAPAvvcNy050AEyNk3U1P+l+XdUjOIC&#13;
    gQVXEsEyIFLkO9eGgiq08anpPZrVpVZM8NOSrATARUgQHu3e17MfhpaJjpbti+skozGtizFKdJ2H&#13;
    TwDYnEejipRzHNV8ByiYZI98AfQoDoOCXTMvIGdDyUsUviqnXa4uqmgHhgUD3gZtfmRnVD9BP+Yz&#13;
    F6kPpQHz26XRxhmPFRVednAKThziJuNpWlvWIIS3O+73Q8VAl9WPMyww/JkZ7QlL2KSwsKSbYxEI&#13;
    EEi3Svs0ekAKIcusO6jVzBzwC4aL97Hj+cwRMN7qAKMo/y7NwZ4gmA4UATfq3FW1ggyA7sPxoAbI&#13;
    tkn1ingvpdda3Lxbv5a4Nv7wNJE/L5IIzGtPHuhd5GI3bq1919JJVlIjnRKVXoigJCaP45p72gtw&#13;
    mXccSvUDB7YzCr5fy1wI9/QkEo7T3Pv/b3IwAI/ni+4UNIX7urj0kQqH3r9x6LFE+sXUFmFM7070&#13;
    6cQHlPPlY4F19Rtin3XePvEWCbmmq+uGP5VaJElZpGYW5J4pu+rNFIwlcEcJsfVgA4jmPDNxKHlk&#13;
    JX7Vtb5VFERPstDon3pdbJLrR/RNYEAeOlQ0uT3tR2DKHczifeCOsNtTYQbQ4qFAdyj5ARh2TFaT&#13;
    j9akhM0HmQUkNoxQkUKA5yTm/3xkt1tNHNq7A1Ew5vVHxh2/1ieSChwFcI19SdcONPMH8DrnndqM&#13;
    v+Tmn4T4ErJnzHkBVEaErzr5qpvVIOI6AlV3ldjtD00Gjl994N3HGmbyye3FuFNmlWWwJMZTLGMy&#13;
    faNnQ5m3pDl4lEzumSSJTg6xWS9WbU96cK4zp23FYdxJlQ5z2H2uJ2eXnZ35np4YEVOy4ufuf1Sk&#13;
    POZV/qE0VqWylOyH08yqWEcSDyB8ePA18/NdcfWW4i9otAKD8mYLARFa1RlKwSGqi7VaTU+TX3FA&#13;
    q1wvOK+EN5SigpKGXyJcw/3xR8huk2V+JKuXB7ZuPIO25SKNysVodPBqKj7MOrY97Uy/yrJ2MjlY&#13;
    XWPGgza7ybsyoORGDnP2liK+aOhiRELFZbzVPyX4LT02Z48ejeGUB7e5XypjsH0QlWj2TETuIRKg&#13;
    UODKcpb/fAd3faI1WOKBTAaujgIlv0KJNpMksN3vsEKiXVLs2Ys2aAI+fuGH0dDbyXl+WUzl0ZAF&#13;
    t3KygAiSwgbhUktgJwmxZN1EI292K6R+0bkR0qbS0OZULT5NjecLbmS5ThmhZr9eELnc/CW/de8L&#13;
    HGb6jIEhrDrb7l9b5R6S4W2tol7nG21x9vzbFyPgDOtGG19mSieMpqsZw0eqBEPfOQof+QXeEWZO&#13;
    300AZxV8GeCbkC+3EnSqtsaYMkHIhnEPuRvP9telmI1RboR5HTbrm+SbhH47E1LnNbHlZiEzvIUm&#13;
    sv14AHmD9nIw/m/duMhPPBfoTNaGm509jNoxbRa6klNn18FnEgaL7ZOIczEaI65mVus4eH08bic4&#13;
    uw2PHPD7BSC2+Izl1PK0q0EDEuJW3YCpir45Ib8lTW0ilL6Irj9IXOdLFgpbeEEbAwFgYsFoiFfM&#13;
    35YO54nHTr4Cnzru3ZYQVHWxJWflpwX7N+2p8RSulqFCV/YsfeMJdIhsO3Scl/xTnwF0JpDBQuou&#13;
    jKLYonjaNiYEuVPTDjL9fUg1GBvsx18DfMnOn5d8jYhaAFFzjoaFjsIzMCYwo9IIY9k6Ns7Jnw4U&#13;
    Vb3pu5Mvr0qeZVaEUDrKqgKBiPqlgGlN1whSfwHBtr3BwyaRSYjXh+O3oZereSAHeZ+oLwFm1CeS&#13;
    FIrnOE0NaG0lu+12H8gRP2UrxPWnUXDQkAVvYqguESdSCzvFmYC8uD0jgY2WbdbQg5lpOQ94hbof&#13;
    d4pqpz8Lt5m4aCE6aumnJ58CNW7z8Z8poIhkNcTG6fvR8/U=</xenc:CipherValue>
          </xenc:CipherData>
        </xenc:EncryptedData>
      </saml:EncryptedAssertion>
    </samlp:Response>


=== PAOS response sent to SP ===
SP Endpoint: https://jdennis-test.example.com/mellon/paosResponse

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:paos="urn:liberty:paos:2003-08" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
  <SOAP-ENV:Header>
    <paos:Response SOAP-ENV:actor="http://schemas.xmlsoap.org/soap/actor/next" SOAP-ENV:mustUnderstand="1" paos:refToMessageID="_C34F09A942C9F30AE90363152835B3BA"/>
    <ecp:RelayState SOAP-ENV:actor="http://schemas.xmlsoap.org/soap/actor/next" SOAP-ENV:mustUnderstand="1">https://jdennis-test.example.com/saml-test/protected.html</ecp:RelayState>
  </SOAP-ENV:Header>
  <SOAP-ENV:Body>
    <samlp:Response Destination="https://jdennis-test.example.com/mellon/paosResponse" ID="ID_a5de8f11-4b90-44d1-95d9-17e03df4781a" InResponseTo="_AB402BBC8309B06129BD6BDD65C392DE" IssueInstant="2019-08-19T17:01:32.924Z" Version="2.0">
      <saml:Issuer>https://jdennis-test.example.com:8443/auth/realms/test</saml:Issuer>
      <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:SignedInfo>
          <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          <dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
          <dsig:Reference URI="#ID_a5de8f11-4b90-44d1-95d9-17e03df4781a">
            <dsig:Transforms>
              <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
              <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
            </dsig:Transforms>
            <dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
            <dsig:DigestValue>xvUpzij/UTOAihYoIutAq1+qYFsvh09nyyoCwOUTdvY=</dsig:DigestValue>
          </dsig:Reference>
        </dsig:SignedInfo>
        <dsig:SignatureValue>AqotGV0ssCsckkvN5aouc/lo4r79nlKrGT8Vm3xCM0Y/yBzzRCN8eXdzaslO8WPX/Rg4a7NxflfO&#13;
xC+WdHMUavlTWgBMBWT60yTXFv3qXw9usio9OoCSReYyl1EXfAdXEjiQgGSkkbTGqXC+ILdKyCDg&#13;
0Q2e/uTwh1RGy+wTYQL0/ciAU5L29RTORS9nM13m/IFlRHRBD8FWSAHGegkdOz5BLwH+BezwJWlE&#13;
uC9r/jtG82NEfVO6OZQnb4090D6QZnuafoI4ljT60r1WQCPw44YVeAAhWFB9XiHjkejAT2fAMnZN&#13;
hPNCbM2G0qALOdscyqu/FuhgJBHZ1jKUd23low==</dsig:SignatureValue>
        <dsig:KeyInfo>
          <dsig:KeyName>Hkki4TCNFFywLlp50Yx9luUgeg4G60HSTov3eaecvSw</dsig:KeyName>
          <dsig:X509Data>
            <dsig:X509Certificate>MIIClzCCAX8CBgFpJePdczANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTE5MDIy&#13;
NTE4MTk0NFoXDTI5MDIyNTE4MjEyNFowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEB&#13;
BQADggEPADCCAQoCggEBAMz3X7gh2+piYwSFrm4ACRWM1sLEuDv/kJ8fjnnlbR9Rx5zfLIes/vsY&#13;
AZ1HqYVoG/hhPHbNFyQEG9PCtLCDLbXUb8H+a9QAmDQbe/HHpicc0yGlsYNVEd+luXAqJ18nBNnj&#13;
odbnT7XSChMzKx368uEdstAmSuE7bXMwG07zlK0W33gra9MdZUnYRzf/Y/7hlQJdm6n+W5oWb0Uy&#13;
iDJDrfhZRglbRYGuDhJTMqw7GEnZK3RUMcAzfoLeEP3Z5vkJT6T+CMlb+d+CBzmijNAZ4OoiZV8l&#13;
l0PV10BC4Q8eX0hqOyP+8DQ+xvdepQjPW2CnPKngpZA+qROkYbOXG5wRQ38CAwEAATANBgkqhkiG&#13;
9w0BAQsFAAOCAQEAh4HYLOdKJOAd3gl0M/pnCvSxAbkP8FU6+Wp/3MFtmq7fd8FnE8IO2ec1ERT6&#13;
OcDIBMZXN/uQvv1xvbHgcUNgE/4IQxQ8Bg6K3gUbss8cR6b5xymLaIvuHmff5OT5Z0I+i8ilMCl2&#13;
UpHmzvtM8wh8zC0FcWyTbxJcvbu/rjD8DKHxd9/N8X+EmyYgYhzjoQ5MHGwvYcj3wFdIDE2ukZvy&#13;
4ov8FDwCdsVgRb7eHtUj/NsmHOTTJ/9PTi/a7OW4l1C4vr41OYsKEvQH3tCNxDBRJNF7+VvH9sCZ&#13;
nHhLRNlxGuRjpfwu0AJRiuacKsccIPj19qo2MgRgiUWV8lPWmJCMyQ==</dsig:X509Certificate>
          </dsig:X509Data>
          <dsig:KeyValue>
            <dsig:RSAKeyValue>
              <dsig:Modulus>zPdfuCHb6mJjBIWubgAJFYzWwsS4O/+Qnx+OeeVtH1HHnN8sh6z++xgBnUephWgb+GE8ds0XJAQb&#13;
08K0sIMttdRvwf5r1ACYNBt78cemJxzTIaWxg1UR36W5cConXycE2eOh1udPtdIKEzMrHfry4R2y&#13;
0CZK4TttczAbTvOUrRbfeCtr0x1lSdhHN/9j/uGVAl2bqf5bmhZvRTKIMkOt+FlGCVtFga4OElMy&#13;
rDsYSdkrdFQxwDN+gt4Q/dnm+QlPpP4IyVv534IHOaKM0Bng6iJlXyWXQ9XXQELhDx5fSGo7I/7w&#13;
ND7G916lCM9bYKc8qeClkD6pE6Rhs5cbnBFDfw==</dsig:Modulus>
              <dsig:Exponent>AQAB</dsig:Exponent>
            </dsig:RSAKeyValue>
          </dsig:KeyValue>
        </dsig:KeyInfo>
      </dsig:Signature>
      <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
      </samlp:Status>
      <saml:EncryptedAssertion>
        <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
          <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
            <xenc:EncryptedKey>
              <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
              <xenc:CipherData>
                <xenc:CipherValue>AbDdoph8tNqbllI1C5psC0yr5eOQkdThDcXAMURFPpYjuX6OYooL4y/hBK5Kuf8rmFpkhb74+3AP&#13;
nOYwq8DY1F6o7izJAVy//S/njKrBqsJpektuGj35l58TnOb7GbWrZnQeaVl05Fi79v+upsUUG3Ls&#13;
cgKHLH7zagWe6S6jXnIK1FeQKX5zgSzOjfXc7KYiyNK2OllgnblJPseehBdlF7NcaZEqQLYPWgXg&#13;
Lwa+bDcGOVr2dGAQtPvY1Qiw4d/R4Ks3yo34a9Hq/P9Np3/sdWis+Q7dT6y4fyMIcM1rLbGBd6UV&#13;
0F7zhzfUEAwolsnwXzvWTftcQ9AG+9a21NBBuw==</xenc:CipherValue>
              </xenc:CipherData>
            </xenc:EncryptedKey>
          </ds:KeyInfo>
          <xenc:CipherData>
            <xenc:CipherValue>KZBIoH6Jg1837wBQKBTT4wpQdXTxeRkPZzgqOnxvczAjH00zIHEnOhrP+1LI08sPZM2GgNDVOHGG&#13;
n+H3j6Oz3mZGhgeiXE8iIiPmhoA6D3ry17OvT/nNOvg6R8lYcb6Y+zdl2jXb3qDduBndd0xG7ct9&#13;
pKrfr6fCwleQFCu1FRoSa1om5rFSvqWqMZlD8lksdlni7Oz5cGrl6yrEI0RGvxxURvvOg+ewIud5&#13;
PR6U9LpsLoOufA6Jes4+fqjSWwMXdP++YTefGZVxieIQV7LbDo6u+fhT7vbkwwFP3uEh4wyZWSzP&#13;
Rzfk/2hXhjF8PUnNwC0VTZukPZJ/MknnIFqMXkxpcuJOjbmtZH4ckhuUYfUtODFus3yJVzy+U8d2&#13;
rXqvHFdFvvZrLLXfLZWp2AETxX5GRFa9dNGDPq3sxAuSoBtH5Ep9byvIi+y8PvJXqsu+HzX36RUD&#13;
MS0eYs9LCuGcdArUiY6vrtyBrrJDsh/cDsdbXhZI/Hx/s5vLIQCjWARvnggY9C5To++8VA2QCnBA&#13;
gegRfcVEmywCQwZj8OGhqCQ4V/mrwpWufCjt53daef6GXkKb3oL2mKcnMu+dT7zuWPPQt6HZ/w2p&#13;
UCAIm2xiRA3Gxv+Nwp8n3ENIFedZts/JS4ABaCDMT6WP8gBK4J0U3CBL9A2w3sw8mlLWLigTyRI9&#13;
SdYBOXlyjrV2x59tOKAIg6WuebQfPLLELePTv9tFTJGNLruQWzKH4MrAVc8xBRB4yCukKIY2ZekG&#13;
OMjxU2eIfog4QNVheag6t6bSbsHDgGCfWhsMADGFg66tbzv8wtbNP2hdKGev0l72+TjXPe3KWhZv&#13;
x1/Sl78umbJ2ej85j8Sx910ohf4EKHEHAQTrG4uVxWAYwZh8wef/K2p/hQsWpsHlbTa5C1Iv2yBg&#13;
LFwGddQqEVBSwKNhcjo77X02StMPE2OF6zpff7/c0ljELbGA//FuISaGazDFMvBtYrDIn0l9EZYQ&#13;
R0cEZBHccObCYvm8m+0LH6Talhrw9igapFFeXGElYFQeTtlLVp9YlwS7efsAcCY2+Iqe5BaPVrZv&#13;
K99PTvd3XTi4ml+lwZ4NbrxbCVs3hx4iLIKXh9MEY+Ue0PLbdT/H25MyYqTZCs6olcauMConhnXY&#13;
h7Uj2rsYkC0nhfJkJPPwmU/TZVw8LmEeFuzqczDqNcr581p2ilroo+ObJWMFMr5zaDYGbEm9KCzY&#13;
fgc+/8YFFTMQeQreP2d7+gz0mR6PjCV2kHP4QHlZBatlG9+ojxStOzuj9TsaossikiGeOTnKvCjN&#13;
9PYsU/LaImjC9RDjWVZiknOXY4fgKO1tqDqlRQqs9SRrGFLKeyY5/pUP6d0eqFU/bPh+hEez6jZ7&#13;
QE16HqL+Bn5GWEpYuwcM+EXTiDaDmScLdme4tVBcXpDScgnjn/lEobb83hewfA1Dd1DDU4fMM9uw&#13;
VkmcddkbiFlsZvLxBx8u6v/DLV0RKFuZKaJ1typ+g+UnRcAAXtX9XsiOCR/KueJ4LMb8p3K7avsg&#13;
WtBfwF+0XadZE+tdpiB5lTXSwtifCY6YbUlwHnYmgBTuOgrmonRko/wK9jPfEhzNB00m8GHJRK/y&#13;
467BCNuPL5fG9dwgBUqyUwLTWuOk03ea3B3Sd6dZqLzQgLgtUoIEwVcA8viXKl+n9x7lB4bMRFzX&#13;
zUYQOmgZe5vq5cISjg7MINrnww9xJVoAUpTqVz4FJLCOT6qClOJ1n59Dub+yPiPmfxqENwGKfLFL&#13;
O38WOPHj+A5kKl3Y/yhmLqqnuI1fDs/50BqpHAYM4CCF3PO013r4LSkFp7xnpJ5UHLFa+G4jXXBW&#13;
CR6aQaGNj01ia+DJ7i5eILpYNoOXU33XRCYzViopQSZWg9GwFKxGL1QWMZLzhN5ET7gm5li3XYPH&#13;
Llg8QDqVL1wJkru5Xh/5hv/qqHJ/cDxqeyw5itIMqmv9LcpKRVWpxfrts1NC3bWS17ebqfTwBWO8&#13;
G0bweUnKaqfP2C8ew0iRdwuFiQ/5JOlZAuW/rUoEfaJ14YGwL8fUqhXEs22RDLV6uRn0IKKIFx8i&#13;
36u2ynPvCHV2jFlUZ+fg9RJmxES1Au6w01bJve8mGtm/mIKZqjVZlESQtnVPwvk69RxKUkLc6GpD&#13;
67xazRr3fx20srHN1B17pgX2DMbvcHQUWvxiOZkzM0UAvXADygkxMsfA3CD7Qoau5o5sM3T7RMi2&#13;
HXL82kTyabNvZ9Kdr6uvqw4y+pG8pekPi7GATBUqyQ6Sc/rTG7bwEvYzPiaWkHGM3C/qryPfE49V&#13;
69dxkgMsUbBQtakXPCFYZrxcIkAjbh3hA659OYeIcLSCx7RkHocwO0Szd63r1vDn1Rpv2s9wfMWB&#13;
TBc+fgsflz6VN7a7olrc7UL7p8kKvrncciZvVq8tciz1At9AOqSf5VOInOvDY/BdvV06UqNBs5RI&#13;
69s1pqW8O2yc14R/lOvrJZxyKbXLoqpZtJOgHT+zvPxvzWawVgwCrUppexPyUsDH1FZwaBfkCXSK&#13;
x98LIMhIZbSeagFI1xnaAwfOdZbdUkmsvnXTPfpFL7I6M/B0Srk1CuJlCQ515myGfcQYQx+u3gac&#13;
pbnL2yLP57/Q6QcsXpMRMsCs/Xdz1j5ksLqalmLUEhz6hjHWWTOgTq/LDIMJ+UxBAA1E9SuR3vyp&#13;
7EBYUZ1AA9zG5+iZxsu/p/zL6aSBIRLJ4ixi5M5Eckk5kXDe+D/q6+Sz/Rfy1ASVbEdx6Q7j4cpp&#13;
R2GvjvNuwiEdHUaqmR5/QmIIPl+/7gAVM0KQ0/Zt5vFeguwdZvB+Z2JAhTAI3iKk6gVmBlPsdIJs&#13;
DAef31zYgxf8pfkMcJ1jrmywsuUFebkUguwOdAnQDopcJN/rwoJaJu0trcB1LNC/ouSXpNge+Zd+&#13;
aaD5hksV1ZRRV99GzpKqtzMJCNj3jK4En/O7Vu8kvJ7cd3goI2vwAH1INKgqErnA+F2iSQAg8e9m&#13;
F1bUbwSyOnSRe+a4z5pe0mjBt2hHL0X9p46EKBnJrIj4kaC9NZxYz9Yz3a6fYF1CAJ040LJigIIq&#13;
vz5CagDdreaIpvy+yQLQIZdDzxayxjEB+UJV8D88d3ydmKW9/mPuyscHnN/9xVhaMxlU7o6UaXUP&#13;
xCbzhTvK3YsWL7Y0megZLOKQPzedPQckbqg70rfuJWkRBhSsqaPgu1QLBEFEe1dYART2w1h4wMgk&#13;
p5ktdp2bBcSPkgt0jPZGuBYHAndSKpOsrhWEZYKUkmPbqxgAw4iyNojJHN2PQD+vcKVoraCwmdI+&#13;
nAuu8owiS7whCM1uFCBYHdyxlH9dIkEC/ueA2tnyVw73fZrQ6cvhbtlw7uhGDrn/zAB47/zpcwcI&#13;
I67Ij2+qHFsMt4DHpVUebBzP0use/d8zavGvGQoih0rKL3D5wYjpTCFnmSKSPn66YyhA4FaEudUk&#13;
XOe4T+fAm4cLEapJIi+i4NkfvUU3kbvevB62GDuOHbme8safqAzQQK5H1CarNaWUrgEXAznRnmyE&#13;
Ml6XevjUlhyVZ05F0M6Uni4XPSkv7F9AfwxrYB7pMH6mRHio3wakcqYZSSg11SF6MIRBUkG7j/RY&#13;
miRvcpVvcvM7mpoSM4COIIZ7joFQ6L/9+Rz8vxox3dWP18Nqi4oZzrXGGnk/i9k2oD+Pv06JEbBp&#13;
A/eSS7jWUr9R327H3taN7qwh7mAr0+XDHXIROueMAsw5wL/VMATb0Gx4qQFpSf98oEu5hIX5zOcd&#13;
Ki9FYfJp1l2y5T3f+5UChyiaX8U7ZirYxi3HR1oRMTaPFTEk6Je5CPlfRbN7kFJmuPB3MtK4Zn+U&#13;
8Kf5tBVI3MOJC/jIL5D+xydaHAitN26kFcH0rUBQ23eoL81PXP/BVW5urPHSMBZvgkdguEWLKszu&#13;
UN2yT2rTIFUdKwrcXWJWDmz51ptjrZaYCpP8YfQM/QJziqsPrg98qB9wq2KRSIBr+BY7cMdR+DcO&#13;
DhPdTBaWPlOAv6vdgJqxNrmL/nX34o6f8IJ1dhxYl5pzIjuNqbBxKa3+iKnOfZZPJrn7X5C7SLq0&#13;
mR6YylMV+htDY4kNhPMwXWZ6sOCP+BoHgGgdczrgHKdO1pepH4t/bKe/flLoi4xVK7UjbjJC0B/o&#13;
bUmKFnH/oeuhZcsldK2aWhq7LmZBGSiOzzrn1CsUcN4cOzyyg5vyldbeaVKlo1T2W0hFn+u8Nk7p&#13;
N4W9q7zD7Xgh1ZBFsY3eZCsBuOI5QpdqnOLsovOjN9pDJyz2GtU/rqeci0FTbQBoZBV72Q4sNVu2&#13;
K/Dxoz2DqV5w3bV+9iEHj0GtbsGA2VdSFAgpT94Lx6dytRaL0jmmcu7j9Ht3zwSdVSgdQivz/R5U&#13;
Heb5KpmlTo+Bkre87XBUsiwKHgatuLtcnCk8gPC4TYTpDuT5mY+rTSjKAdLyEte7fY4otopx8v+w&#13;
StBONZQDSu7sUq2rWiVuAHT62YpdbTCpvlQ05GSGWAEmfCG9/Oxls0ZD7xYoKWB8h/qGzur8CoGQ&#13;
NI7K7CC/1O2XdeQakjC2UXDDyCVLXi6PuJQN0VE0a+MkbhRQVVm/mYuk0CRYQNQqX2K0cJQHls9U&#13;
T8keTlPkWzcHCsPmWcUOYVeCN2aigIX6eDJ32Dr1+WCtrzI77AuM/ZvGz1ihPXHuF1K/wuzAYDHl&#13;
+g6ipneb7rkTDKaen/+Xb3BHSXdQCPYTnmqZLvwqWFwaHO/IkLsQWv8K58f0autS+il9QcchZMBR&#13;
kTVjLUMIg70/Fluc2OXuyOKYIlRKjaom1tmhK89uokB0/WmfUThJFipEN3gFedvi8iQ+JnEf5gnQ&#13;
UADCdtTCnRVJts2u/Lv2VlE0ysfeAsEH4GMsP588Zg6DaQWUm01Yjry/U3OmJ7dBHSQv2/3Tx50Y&#13;
JsGz9pnL0oUDMna3nxLcoHdZa14Y6U2cq5NN3zhGNvqLAF6TP2m5htskJHkDQlPayBwaMCQ3m49C&#13;
GcFvn811kAsMjP3i+ZlU1XgeCFS8sPqcayCf1CfYDwm0aff/HzU0j4zM4K1D+q/Li37IDrnQTFDi&#13;
xuvsw5JD0rxes0b43tvJXQorIrXVIo+xtDB1Q9NmSvUfFeF+brhlOQzO7JTDQYNZj9NNqNEPGrAV&#13;
LVIKYhLGX7kOpVpBLErp6KIYv7dL1NEqe0REd7ewxY0FHvma/1VG4SXBCcYqPokfaQzHVCN11BMe&#13;
P14AqP4FrGzp+fnqqx2v773Z0i/iHSxt+uEPbh+6lr6eCtYFB094DS8ok7Cuycd60lif9L8pTXca&#13;
j4h1uTfKV6KSvtDqWdBY4wdS4u6vhebAzfF7HuUyzthVhxjAYUp5lTVhEJZYjgtKpn6hmW/euNYJ&#13;
bbA1+DC/+DtXJ2UcNfwP1azPymmQQKoAgDnk0f7czZctfNhfzHL7Y8QSFeDWaDYWr6W+bpghmKCf&#13;
27v6vaRBQkPsfZcYfUPHc6oDRkhlUrdbL3N4dWE58D/eQCP2uPHiPX8PRrXRMiiLUYvYP4ZKOlAg&#13;
FoT4Czz/5008kPFzOCU9Dn0Th8u3ABdiOto9zqn1yNfwnT6W2Xb/5uoT/K7SjKZw5JeQr5wj1xDI&#13;
Bh5Mlr0/P59eKH/9OarcTDkyWjhVU2Fq9MiFhKkhSuF0Y/NFnKUXpM6LFzDFmSSlc0MnBDVUFLPI&#13;
UxODz8HmL1rsq2jSWU+66fWdnXq5H+neVTOrBbzy8Bbce/GmY1iSdxx9i3sGrla2/iBcQM2MsG5Q&#13;
CPk+g09/bqgpkeEjZFCRT4IbQ9Qjs3mT9uQbmFGacLiNi2DEunt3FA5IEqyXj7R94jidi8RxzE5m&#13;
arZG64uTNN640fbniuknYxeruMXyxNk4ZcGWvhH3eh3HPWAPAvvcNy050AEyNk3U1P+l+XdUjOIC&#13;
gQVXEsEyIFLkO9eGgiq08anpPZrVpVZM8NOSrATARUgQHu3e17MfhpaJjpbti+skozGtizFKdJ2H&#13;
TwDYnEejipRzHNV8ByiYZI98AfQoDoOCXTMvIGdDyUsUviqnXa4uqmgHhgUD3gZtfmRnVD9BP+Yz&#13;
F6kPpQHz26XRxhmPFRVednAKThziJuNpWlvWIIS3O+73Q8VAl9WPMyww/JkZ7QlL2KSwsKSbYxEI&#13;
EEi3Svs0ekAKIcusO6jVzBzwC4aL97Hj+cwRMN7qAKMo/y7NwZ4gmA4UATfq3FW1ggyA7sPxoAbI&#13;
tkn1ingvpdda3Lxbv5a4Nv7wNJE/L5IIzGtPHuhd5GI3bq1919JJVlIjnRKVXoigJCaP45p72gtw&#13;
mXccSvUDB7YzCr5fy1wI9/QkEo7T3Pv/b3IwAI/ni+4UNIX7urj0kQqH3r9x6LFE+sXUFmFM7070&#13;
6cQHlPPlY4F19Rtin3XePvEWCbmmq+uGP5VaJElZpGYW5J4pu+rNFIwlcEcJsfVgA4jmPDNxKHlk&#13;
JX7Vtb5VFERPstDon3pdbJLrR/RNYEAeOlQ0uT3tR2DKHczifeCOsNtTYQbQ4qFAdyj5ARh2TFaT&#13;
j9akhM0HmQUkNoxQkUKA5yTm/3xkt1tNHNq7A1Ew5vVHxh2/1ieSChwFcI19SdcONPMH8DrnndqM&#13;
v+Tmn4T4ErJnzHkBVEaErzr5qpvVIOI6AlV3ldjtD00Gjl994N3HGmbyye3FuFNmlWWwJMZTLGMy&#13;
faNnQ5m3pDl4lEzumSSJTg6xWS9WbU96cK4zp23FYdxJlQ5z2H2uJ2eXnZ35np4YEVOy4ufuf1Sk&#13;
POZV/qE0VqWylOyH08yqWEcSDyB8ePA18/NdcfWW4i9otAKD8mYLARFa1RlKwSGqi7VaTU+TX3FA&#13;
q1wvOK+EN5SigpKGXyJcw/3xR8huk2V+JKuXB7ZuPIO25SKNysVodPBqKj7MOrY97Uy/yrJ2MjlY&#13;
XWPGgza7ybsyoORGDnP2liK+aOhiRELFZbzVPyX4LT02Z48ejeGUB7e5XypjsH0QlWj2TETuIRKg&#13;
UODKcpb/fAd3faI1WOKBTAaujgIlv0KJNpMksN3vsEKiXVLs2Ys2aAI+fuGH0dDbyXl+WUzl0ZAF&#13;
t3KygAiSwgbhUktgJwmxZN1EI292K6R+0bkR0qbS0OZULT5NjecLbmS5ThmhZr9eELnc/CW/de8L&#13;
HGb6jIEhrDrb7l9b5R6S4W2tol7nG21x9vzbFyPgDOtGG19mSieMpqsZw0eqBEPfOQof+QXeEWZO&#13;
300AZxV8GeCbkC+3EnSqtsaYMkHIhnEPuRvP9telmI1RboR5HTbrm+SbhH47E1LnNbHlZiEzvIUm&#13;
sv14AHmD9nIw/m/duMhPPBfoTNaGm509jNoxbRa6klNn18FnEgaL7ZOIczEaI65mVus4eH08bic4&#13;
uw2PHPD7BSC2+Izl1PK0q0EDEuJW3YCpir45Ib8lTW0ilL6Irj9IXOdLFgpbeEEbAwFgYsFoiFfM&#13;
35YO54nHTr4Cnzru3ZYQVHWxJWflpwX7N+2p8RSulqFCV/YsfeMJdIhsO3Scl/xTnwF0JpDBQuou&#13;
jKLYonjaNiYEuVPTDjL9fUg1GBvsx18DfMnOn5d8jYhaAFFzjoaFjsIzMCYwo9IIY9k6Ns7Jnw4U&#13;
Vb3pu5Mvr0qeZVaEUDrKqgKBiPqlgGlN1whSfwHBtr3BwyaRSYjXh+O3oZereSAHeZ+oLwFm1CeS&#13;
FIrnOE0NaG0lu+12H8gRP2UrxPWnUXDQkAVvYqguESdSCzvFmYC8uD0jgY2WbdbQg5lpOQ94hbof&#13;
d4pqpz8Lt5m4aCE6aumnJ58CNW7z8Z8poIhkNcTG6fvR8/U=</xenc:CipherValue>
          </xenc:CipherData>
        </xenc:EncryptedData>
      </saml:EncryptedAssertion>
    </samlp:Response>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

=== Send PAOS response to SP, if successful SP resource is returned ===

Request:
  url = https://jdennis-test.example.com/mellon/paosResponse
  method = POST
  Headers:
    Accept: */*
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Content-Length: 13179
    Content-Type: application/vnd.paos+xml
    User-Agent: python-requests/2.20.0

Response:
  Status = 303
  Headers:
    Cache-Control: private, max-age=0, must-revalidate
    Connection: Keep-Alive
    Content-Length: 264
    Content-Type: text/html; charset=iso-8859-1
    Date: Mon, 19 Aug 2019 17:01:32 GMT
    Keep-Alive: timeout=5, max=99
    Location: https://jdennis-test.example.com/saml-test/protected.html
    Server: Apache/2.4.39 (Fedora) OpenSSL/1.1.1c
    Set-Cookie: mellon-cookie=2e34a67c9b5bce2412d29c230a3faf87; Version=1; Path=/; Domain=jdennis-test.example.com;

Request:
  url = https://jdennis-test.example.com/saml-test/protected.html
  method = GET
  Headers:
    Accept: */*
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Cookie: mellon-cookie=2e34a67c9b5bce2412d29c230a3faf87
    User-Agent: python-requests/2.20.0

Response:
  Status = 200
  Headers:
    Accept-Ranges: bytes
    Cache-Control: private, max-age=0, must-revalidate
    Connection: Keep-Alive
    Content-Length: 209
    Content-Type: text/html; charset=UTF-8
    Date: Mon, 19 Aug 2019 17:01:32 GMT
    ETag: "d1-57b9aa0a4d398"
    Keep-Alive: timeout=5, max=98
    Last-Modified: Tue, 27 Nov 2018 00:35:33 GMT
    Server: Apache/2.4.39 (Fedora) OpenSSL/1.1.1c

=== SP Resource ===
<html>
  <body>
    <h1>This is a SAML protected page.</h1>
    <a href="https://jdennis-test.example.com/mellon/logout?ReturnTo=https://jdennis-test.example.com/logged-out.html">Log out</a>
  </body>
</html>

