===  ECP Issues HTTP Request to Service Provider ===

Request:
  url = https://jdennis-test.example.com/saml-test/protected.html
  method = GET
  Headers:
    Accept: text/html, application/vnd.paos+xml
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    PAOS: ver="urn:liberty:paos:2003-08";"urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp"
    User-Agent: python-requests/2.20.0

Response:
  Status = 200
  Headers:
    Cache-Control: private, max-age=0, must-revalidate
    Connection: Keep-Alive
    Content-Length: 3671
    Content-Type: application/vnd.paos+xml
    Date: Mon, 19 Aug 2019 20:06:31 GMT
    Keep-Alive: timeout=5, max=100
    Server: Apache/2.4.39 (Fedora) OpenSSL/1.1.1c

=== Process PAOS request from SP ===
SP PAOS Request Info:
  response_consumer_url: https://jdennis-test.example.com/mellon/paosResponse
  message_id: _5111E9405DFDA53D86B9A7C085DE292F
  is_passive: false
  issuer: https://jdennis-test.example.com/mellon/metadata
  relaystate: https://jdennis-test.example.com/saml-test/protected.html
  authn_request:
    <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:paos="urn:liberty:paos:2003-08" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_2228A05515CD953BDBFB9AF0A6BF615D" Version="2.0" IssueInstant="2019-08-19T20:06:31Z" Destination="https://jdennis-test.example.com/mellon/paosResponse" Consent="urn:oasis:names:tc:SAML:2.0:consent:current-implicit" ForceAuthn="false" IsPassive="false" AssertionConsumerServiceURL="https://jdennis-test.example.com/mellon/paosResponse">
      <saml:Issuer>https://jdennis-test.example.com/mellon/metadata</saml:Issuer>
      <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
    <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <Reference URI="#_2228A05515CD953BDBFB9AF0A6BF615D">
    <Transforms>
    <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
    <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    </Transforms>
    <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <DigestValue>S/gP3p5v9RLezllMjx/GgAeoztkv2LoLW7VraDDi8yQ=</DigestValue>
    </Reference>
    </SignedInfo>
    <SignatureValue>D5/dgV97wZV7aWbAwmqXymcfSavbyOKMcYmZKOkrH5N2Uu5JwlP9gAqvAswBcELk
    DWjhqpiY+MDmXuU8fhH8CDlMoIWDI/5jJ+UbOva+uqTjO1Xv2G8yLQKt2mbRbKfQ
    m9Q/jyR78Uv4i9zS2zUrozBoScBiBGr31e4V6VmMYiBNf5pGS2vi2+x6L1F/ODfK
    a1/LxU4FpZskANcj8rlGwGfHSIn8R+VGYxiA3QkluRa+dRFHmEPdZZx9YmBMZZ7h
    w4xxTTe6p16MpUtkTNkStflpiNP+r+V7f5lQrtP1ODx3SaGw4uQRd+FOel3zPR6I
    ph7N8iEmcdJZfixg+j+WZw==</SignatureValue>
    <KeyInfo>
    <X509Data>
    <X509Certificate>MIIDHDCCAgSgAwIBAgIJAPaxVBaHw2CAMA0GCSqGSIb3DQEBCwUAMCMxITAfBgNV
    BAMMGGpkZW5uaXMtdGVzdC5leGFtcGxlLmNvbTAeFw0xODA4MTQyMzE0MTFaFw0y
    MzA4MTMyMzE0MTFaMCMxITAfBgNVBAMMGGpkZW5uaXMtdGVzdC5leGFtcGxlLmNv
    bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANuxHoQJZfMynQM8larz
    9xlRikPenU8FJeEIeQ8UVVbs5PpINcshRSCxK/8ru4iDX+ZIjk4LG05uggzatRDC
    PvUBZllRXWrMzzz62o0hww+eOqoskupl0joU7+FN+cMuZH33cdN7nBlYa+yNRI+z
    DzhUWgAWnMu5lN8m0b5jzEbEnmzkB92hj9oLQdyUH4ZjwLRg1C4GXF9dFhoqmqZv
    szPk98AJgDJU8P13H2uPOmwwIfvm67Ik/zMS/8q4hpsmh0qjPQUFOrypN7SW58sT
    85jpe63dg1Vm8MnU12Xv6DFTqYJZ+zrwD7lt0E6ntA6Or6/buEPXfkpsa4kzI9Kt
    hl0CAwEAAaNTMFEwHQYDVR0OBBYEFHNBhzSnOjg+/BDNERD0H54Ao+vuMB8GA1Ud
    IwQYMBaAFHNBhzSnOjg+/BDNERD0H54Ao+vuMA8GA1UdEwEB/wQFMAMBAf8wDQYJ
    KoZIhvcNAQELBQADggEBALFpgbFs8O+u8JQ1UNTtqXBB8K2mtws5gcGVqEuOmiUC
    GkqZqvKYjRGdGc0ZyWQD0RJ6a51jWC/Fl9fTcrFngujMX7jWinTGhL66f9LpreD0
    UwcRetUVP4SBGKuXEdAdxiTf4ZsIDLjFqRZozfqNvPO6aLO1iUpts6HeuiZaudJt
    n0GL33YVNz22uA2B7vkcqFoveHa05TuobTTVy6V0a/jv/P5JhL9+JTP/1ev5JFsf
    Gr5M188iCHyh6QVU45fltn6b5dL4haxNhYZOXfMjS3cjA5Nvz3sivIufj4uJtfD/
    UtBOi1NQHUyhnBDBCtkqM50vV3yeWkvnMSk7hxMYvAk=</X509Certificate>
    </X509Data>
    </KeyInfo>
    </Signature>
      <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" AllowCreate="true"/>
    </samlp:AuthnRequest>


=== ECP Determines Identity Provider ===
Using IdP endpoint: https://jdennis-test.example.com:8443/auth/realms/test/protocol/saml

=== ECP sends <AuthnRequest> to IdP with authentication ===

Request:
  url = https://jdennis-test.example.com:8443/auth/realms/test/protocol/saml
  method = POST
  Headers:
    Accept: */*
    Accept-Encoding: gzip, deflate
    Authorization: Basic amRvZTpkb3JhbWU=
    Connection: keep-alive
    Content-Length: 3024
    Content-Type: text/xml
    User-Agent: python-requests/2.20.0

Response:
  Status = 200
  Headers:
    Connection: keep-alive
    Content-Length: 13104
    Content-Type: application/octet-stream
    Date: Mon, 19 Aug 2019 20:06:31 GMT
    P3P: CP="This is not a P3P policy!"
    Set-Cookie: AUTH_SESSION_ID=7c66c5f9-810d-4482-adb4-8bcd40638329.jdennis; Version=1; Path=/auth/realms/test/; HttpOnly, KC_RESTART=; Version=1; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/test/; HttpOnly, KC_RESTART=; Version=1; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/test/; HttpOnly, KEYCLOAK_IDENTITY=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI5OTQ4ZjZhOC02YzgwLTQ5MDktYTFmMi1jNjU0YmI1ODgyOTcifQ.eyJqdGkiOiI5Y2FkZTNkYi1kY2YyLTRiMDctOGE3NC1hOTc2ODcyYjU1MWMiLCJleHAiOjE1NjYyODExOTEsIm5iZiI6MCwiaWF0IjoxNTY2MjQ1MTkxLCJpc3MiOiJodHRwczovL2pkZW5uaXMtdGVzdC5leGFtcGxlLmNvbTo4NDQzL2F1dGgvcmVhbG1zL3Rlc3QiLCJzdWIiOiI4NmNiYTNmZC00Y2IwLTQxMGMtYWQxYy0zYjM5NWNmNTlmNTAiLCJhdXRoX3RpbWUiOjAsInNlc3Npb25fc3RhdGUiOiI3YzY2YzVmOS04MTBkLTQ0ODItYWRiNC04YmNkNDA2MzgzMjkiLCJyZXNvdXJjZV9hY2Nlc3MiOnt9LCJzdGF0ZV9jaGVja2VyIjoiR3JZUzlnOGlsdUdqdDJsYkxxLVE2OC14ZHRwRGp1cG1DWlVYV2FKNmdzSSJ9.JTO0nhQz3IzshDnESMw1JaVb-anoCaCLLS2jHclScUE; Version=1; Path=/auth/realms/test/; HttpOnly, KEYCLOAK_SESSION=test/86cba3fd-4cb0-410c-ad1c-3b395cf59f50/7c66c5f9-810d-4482-adb4-8bcd40638329; Version=1; Expires=Tue, 20-Aug-2019 06:06:31 GMT; Max-Age=36000; Path=/auth/realms/test/, KEYCLOAK_REMEMBER_ME=; Version=1; Comment=Expiring cookie; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Max-Age=0; Path=/auth/realms/test/; HttpOnly

SOAP message from ECP to IdP
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:paos="urn:liberty:paos:2003-08" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
  <s:Body>
    <samlp:AuthnRequest ID="_2228A05515CD953BDBFB9AF0A6BF615D" Version="2.0" IssueInstant="2019-08-19T20:06:31Z" Destination="https://jdennis-test.example.com/mellon/paosResponse" Consent="urn:oasis:names:tc:SAML:2.0:consent:current-implicit" ForceAuthn="false" IsPassive="false" AssertionConsumerServiceURL="https://jdennis-test.example.com/mellon/paosResponse">
      <saml:Issuer>https://jdennis-test.example.com/mellon/metadata</saml:Issuer>
      <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<Reference URI="#_2228A05515CD953BDBFB9AF0A6BF615D">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestValue>S/gP3p5v9RLezllMjx/GgAeoztkv2LoLW7VraDDi8yQ=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>D5/dgV97wZV7aWbAwmqXymcfSavbyOKMcYmZKOkrH5N2Uu5JwlP9gAqvAswBcELk
DWjhqpiY+MDmXuU8fhH8CDlMoIWDI/5jJ+UbOva+uqTjO1Xv2G8yLQKt2mbRbKfQ
m9Q/jyR78Uv4i9zS2zUrozBoScBiBGr31e4V6VmMYiBNf5pGS2vi2+x6L1F/ODfK
a1/LxU4FpZskANcj8rlGwGfHSIn8R+VGYxiA3QkluRa+dRFHmEPdZZx9YmBMZZ7h
w4xxTTe6p16MpUtkTNkStflpiNP+r+V7f5lQrtP1ODx3SaGw4uQRd+FOel3zPR6I
ph7N8iEmcdJZfixg+j+WZw==</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>MIIDHDCCAgSgAwIBAgIJAPaxVBaHw2CAMA0GCSqGSIb3DQEBCwUAMCMxITAfBgNV

UtBOi1NQHUyhnBDBCtkqM50vV3yeWkvnMSk7hxMYvAk=</X509Certificate>
</X509Data>
</KeyInfo>
</Signature>
      <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" AllowCreate="true"/>
    </samlp:AuthnRequest>
  </s:Body>
</s:Envelope>

=== Processed response from IdP ===
IdP SOAP Response Info:
  SAML Status Code: urn:oasis:names:tc:SAML:2.0:status:Success
  SAML Status Code 2: None
  SAML Status Message: None
  SAML Status Detail: None
  idp_assertion_consumer_url: https://jdennis-test.example.com/mellon/paosResponse
  idp_request_authenticated: True
  SAML Response:
    <samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Destination="https://jdennis-test.example.com/mellon/paosResponse" ID="ID_9914fcf0-00aa-4a92-8776-534dd2389e85" InResponseTo="_2228A05515CD953BDBFB9AF0A6BF615D" IssueInstant="2019-08-19T20:06:31.598Z" Version="2.0">
      <saml:Issuer>https://jdennis-test.example.com:8443/auth/realms/test</saml:Issuer>
      <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:SignedInfo>
          <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          <dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
          <dsig:Reference URI="#ID_9914fcf0-00aa-4a92-8776-534dd2389e85">
            <dsig:Transforms>
              <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
              <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
            </dsig:Transforms>
            <dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
            <dsig:DigestValue>4SbgQn5dLy1zp67MMDxIUgeIretiQR08taIOG8GgTtM=</dsig:DigestValue>
          </dsig:Reference>
        </dsig:SignedInfo>
        <dsig:SignatureValue>c/NmP3gQFYrwF0suhu/e7UyQUBbvoTNmXuU57gtwMXAtiubCWjCDjyGaW4C2G+ucw4JJ4fXwThsG&#13;
    +2YM1Yb8k+5tqaYhuPkWsYe6iSUMbm1bE1LAQpSl42vEompTIxuXW/kHwhaE6oSjlAc7rdhmLu1o&#13;
    ehFxkEXwZ2nMW35S9QiADLpi9n7GZvMtkU63Z472inHmvaTrThPrHAz1wLHdiaODzOsJ0301M2qU&#13;
    caUOa/uSLJS6Yo/CUsKNqkTiqfxsB1p4WA5c4Jzt1XFbv8wmmGtpTFRECXc3WXtY4Cl0m8TUxXHk&#13;
    DzkoSULrcozxzb1Y/DyJi02cyHYC51e6O7Ad5Q==</dsig:SignatureValue>
        <dsig:KeyInfo>
          <dsig:KeyName>Hkki4TCNFFywLlp50Yx9luUgeg4G60HSTov3eaecvSw</dsig:KeyName>
          <dsig:X509Data>
            <dsig:X509Certificate>MIIClzCCAX8CBgFpJePdczANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTE5MDIy&#13;
    NTE4MTk0NFoXDTI5MDIyNTE4MjEyNFowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEB&#13;
    BQADggEPADCCAQoCggEBAMz3X7gh2+piYwSFrm4ACRWM1sLEuDv/kJ8fjnnlbR9Rx5zfLIes/vsY&#13;
    AZ1HqYVoG/hhPHbNFyQEG9PCtLCDLbXUb8H+a9QAmDQbe/HHpicc0yGlsYNVEd+luXAqJ18nBNnj&#13;
    odbnT7XSChMzKx368uEdstAmSuE7bXMwG07zlK0W33gra9MdZUnYRzf/Y/7hlQJdm6n+W5oWb0Uy&#13;
    iDJDrfhZRglbRYGuDhJTMqw7GEnZK3RUMcAzfoLeEP3Z5vkJT6T+CMlb+d+CBzmijNAZ4OoiZV8l&#13;
    l0PV10BC4Q8eX0hqOyP+8DQ+xvdepQjPW2CnPKngpZA+qROkYbOXG5wRQ38CAwEAATANBgkqhkiG&#13;
    9w0BAQsFAAOCAQEAh4HYLOdKJOAd3gl0M/pnCvSxAbkP8FU6+Wp/3MFtmq7fd8FnE8IO2ec1ERT6&#13;
    OcDIBMZXN/uQvv1xvbHgcUNgE/4IQxQ8Bg6K3gUbss8cR6b5xymLaIvuHmff5OT5Z0I+i8ilMCl2&#13;
    UpHmzvtM8wh8zC0FcWyTbxJcvbu/rjD8DKHxd9/N8X+EmyYgYhzjoQ5MHGwvYcj3wFdIDE2ukZvy&#13;
    4ov8FDwCdsVgRb7eHtUj/NsmHOTTJ/9PTi/a7OW4l1C4vr41OYsKEvQH3tCNxDBRJNF7+VvH9sCZ&#13;
    nHhLRNlxGuRjpfwu0AJRiuacKsccIPj19qo2MgRgiUWV8lPWmJCMyQ==</dsig:X509Certificate>
          </dsig:X509Data>
          <dsig:KeyValue>
            <dsig:RSAKeyValue>
              <dsig:Modulus>zPdfuCHb6mJjBIWubgAJFYzWwsS4O/+Qnx+OeeVtH1HHnN8sh6z++xgBnUephWgb+GE8ds0XJAQb&#13;
    08K0sIMttdRvwf5r1ACYNBt78cemJxzTIaWxg1UR36W5cConXycE2eOh1udPtdIKEzMrHfry4R2y&#13;
    0CZK4TttczAbTvOUrRbfeCtr0x1lSdhHN/9j/uGVAl2bqf5bmhZvRTKIMkOt+FlGCVtFga4OElMy&#13;
    rDsYSdkrdFQxwDN+gt4Q/dnm+QlPpP4IyVv534IHOaKM0Bng6iJlXyWXQ9XXQELhDx5fSGo7I/7w&#13;
    ND7G916lCM9bYKc8qeClkD6pE6Rhs5cbnBFDfw==</dsig:Modulus>
              <dsig:Exponent>AQAB</dsig:Exponent>
            </dsig:RSAKeyValue>
          </dsig:KeyValue>
        </dsig:KeyInfo>
      </dsig:Signature>
      <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
      </samlp:Status>
      <saml:EncryptedAssertion>
        <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
          <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
            <xenc:EncryptedKey>
              <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
              <xenc:CipherData>
                <xenc:CipherValue>C66X026yG1FSDC5fQkOgutBJY3UckBzqhLbRPzhYELdJxUWD5l474MjFi3g2rLUEq2VeH+G5F/fH&#13;
    fTO9OpAvSxStO/Pr2F8Wzq9n9tLCyr8RrkQjw48ySYGpQqXIaeVHu4wXa/KrwOSRNdhQ93+A3rK+&#13;
    j8YCmtcBtsl69TDyvs9qNRa9UPpF2VtXmRQpAoFemU4k/hU1Fv6FeyUVoxT96bFAXj2DGk6MGI50&#13;
    L7rsYHMraKnYtDnJoKlAoUxGD49qFMiyuZydsBSAVVuxlYrOG/CrBRH+bHeZlLgPscVwfntqBYoC&#13;
    fpkveHFKPxtoT++VMkwsZZMIyDkp2Z112Nd/4A==</xenc:CipherValue>
              </xenc:CipherData>
            </xenc:EncryptedKey>
          </ds:KeyInfo>
          <xenc:CipherData>
            <xenc:CipherValue>K0o6sqTWSUrs0udAh6gGOQBEfkHDXM3nvYjlsa+qFqbsqvNP9j73FbkNBSeDdCfyy/gdpce0yPz0&#13;
    /3sVpipIET0pC2VLi7eLrBSH4R0OkrkWCRcWg2fmNXbUu+/03xDJNCj1JoHQR3UqYxLi9IIBt0BD&#13;
    rFcMJoiLqCbRs2BsOvL1w2+VEHs6knhCYajygi3HmIXV9pkkne/KvA56ZqDzKh8Xn1qE4TVtkRmk&#13;
    u1psdDYbivV88UL7l7DsgLu6cmswXhNIxCmOkkzFkPWGXPExFsRN11RfYusV2LLlungJp0ZjQkl+&#13;
    AkoOs2Ox+8WXlILO0iLO372ECwiPT1hvBuYe+o3BAF2T8vRMGNrGG7DKVnBqck/SJWZh+XAaWgRd&#13;
    S6PBDbNEsfoU/QdnpyuW2DuEEwov1BuFOsvP34O2g7QTHL6ywi9q3CbRl2tiIKT0bfqDfYHa533i&#13;
    v5fjfmWlocTI7/EiCPPozCWEfitv//B4F3Wa/BFNBULCuOBzVu/XRWm5CwHvgNhaFnxGb24jEzFd&#13;
    HUi4vVch8LOcgOJpWlWRWAkBxzJF44skzQGFGTkFYUkpkYUhRxG8+ZFceNz0J0fwKbPI2GptI5Qh&#13;
    BEa7PzRFRzjy6CfOURGAiuMqDS/Nvdi7D8Q+cCe1neYX6WGzWFgxxFSHmY0T/Pk+98glNfZF2n48&#13;
    lnhFtf9UD/qCcIPg0RPIibig4XFJK9ljLDpqcQsMyMcVN94T1AGZFsOXhH+LMbVcPUtx5xuoX+/N&#13;
    HaQpuIwe8Bxw5eYSgsBy9pATJ1kBQsOefXQShbGyOt6TKrwwjObHOIFOIZshg2JJdVG63H5VhwLW&#13;
    2e5fCbnNYdE0uerd4udUNHYKHf8XOrfb8IaeO09H+Ct2WAcyDA5ACT4joEKJCFEJMgI9tnIwlQMP&#13;
    pq8IIM6o2JDGwwRhsst3gHqNKRN9SRzRY7ZZn2+z1R6WuBaOsAwTRU9cg3b3vxkjEjHkbCGPgPKS&#13;
    rg0MoiJThfcuPfDbJKPSryKzb0lgzMCt2rvLiWNZ6xa9/DFYJ0LZLJupWr/sK4apaobwYH1bA9lv&#13;
    1vCqL8n3xSvRRblSeGGzrJDP3n1j94ChXmW0M3SfrCw3LCNAR89g9iuPl/gJbBcykLufapiFlRHa&#13;
    JjrFBMA9aLF6M8tUGJItqAl8bVsA/QsqrjayWec1IEqARygzZ1KTjOz8FixxhFyb48gRo/AeieUQ&#13;
    xv8lJFGsQvE+o4VLBDSI/IvZKnSJbDSh8gLnRr7nweNgrt1WYw5zpjd/9Q1subjsZ1P1oY2lZzQY&#13;
    e3o6NTdE2F/4ETJLxme8TLX5pnj2Z2bUVQAseOul0wN3NxOdQ8IlfHPS6HsMl0GeJV6v2hPWo96X&#13;
    SytTCCBSI4YKNO341AdP8Ajxvh5KVK/VRUPqakz7IIgdjYuIgOXGFs+gN7/y9Lrte48RmUquwnLh&#13;
    KU3JOUY3729Jayvq3cgig6Yi+YVt8P+mTLAhZ89PJZYRf++yE6EJyP0k1BzdvxVgRBVGDtXyWSB0&#13;
    NiB0ZagkpHe9np14mn61odoPTUD3OqE/cCssFkxvfqEEyA7yXwHJlFCeUgqojidcJ2xW26AXSPPW&#13;
    W2UmTlOOd0dMaW7oSvhYmca7twiXmV+ObJDs5ziGxVh3ULjq5npDYNoDrTMSyb9pxTuot4QSnTB8&#13;
    I3zYczsFH8LZcN4cCHMbTwiNkWMIme1E12D8RZHsUoIRdq7/TlpTheeyEdr4jKa3jqccaGOFj+Wk&#13;
    lmIQxV0UaWMA0UgMsTRfZUpEJFI9OeH8E3FcInbXL2kmH+iHlEm249SpEexHp192KmO6kTbnH40V&#13;
    eElOjD125J8VBbecICINQ9JwYlNq+uD6BUtU9JoYgwic+FBq9zReXLGTmxPcDb/sSla/UJoq/4NO&#13;
    UGV4214kC+di/OcCr1J6X1Pp6nIrMqXknnG4wI5dV0t6eTpz0C1/EeKiJrokBFVjkPfq/F9jjHh2&#13;
    YDn18etFF55/IicVgGFqvXTpvo6oureKWYQd+bTY0AsODSMYcw8tzmLedMDmmGMHWUspfyOFkM8s&#13;
    uBRUqi0TE1FWYygDJ7QT/X2mQEX4cQ5cH0IXU0zIOQkl8N9xCRoA1mGuL+I+B4u3m8bPyBqh9dZ+&#13;
    MqTRwMwNFcn8BwEkVzOZ8vbbeTmxYDSXTQftMV8OttRNJEog99gQwH1kazeUOEp/fXCFG4ev74hI&#13;
    yOcaQHEECCbuGqfzNmxrwP2NJ8U31d0ZOaP7uXAKy/qBa+UNpJdO6cKVK9qbcVg+KI80xvsMd7W+&#13;
    iOpJ00EHBvuoGBn+xo7owuWPugLNfekKVlDInx51fP8zVxrPmKd+zy/CXm6ipY0tiDjLzhwg5uVV&#13;
    jFZKROGZt6G4dLkRaiGECvHILc+AfQWmRKabtj+Uckhs7sd41JEmmAwI5PoUEi1nDtEasc15B/8d&#13;
    A5X8WwlrFQV5IT9b6JKe58U0FvkHeJJyFhrbwxOSpCRyseZRn1VWzMBuGD7GufrLlH5qiaYrTPt1&#13;
    b503fSB+buNRpWf1vPYTVmeL/P1x1bnITe6Tn8OxCUn8oUY3FJEkaiheLJlW/XFTVfLzL3h9XfI8&#13;
    8RdMcx9mo5jMyU2t6/Q9w0JqCQNLQdgmyZ/V8NH1druABmvaPavbP2RXZDXvc5lfqpYeo9r0+YD0&#13;
    GXTa6yPeu9jkXaV9N9ilHdpJhwOodINEPtb7yzDXsnk7ujnGLdsFFbN34QeKPD+tpyFkOpi/zCPf&#13;
    ZEaG/mnGYD2yVcs2+l9FFCeXaSICj62GY6EoGSzSsVZSRMQ8ChWDgDaQCBdrlrIM7Zb5fb6w2yZe&#13;
    foBcTWnknMp+QZOVY6/SGqc7rLBawAWm6pGizCrkywARFOAl54KXM4BHqh71TMJd7XqnZWymQQ3g&#13;
    ZDuixAKcl+yb0Quex2qrL99OcdDwwOdslZ1eGMakyJt5r6nrAyTS38hibIgA1TJ0+m0H6FDa9Q7x&#13;
    OiKrETYc88C0qKBL+Yg1BZVj4LC9uTKYefo2UYPdF3Bde+lziEy/TxvkqHTud/HVELIDz3kqK89e&#13;
    i2udobTtKWYwXVIYekxbUoTGPqDKA7uAJNoo3i5dV6i3tht8c9sAOqDmfon85bya+trWRFNCBhiD&#13;
    MroJFujlVy1Yw7ct/IEHeAyxwVeTOUe8wjxWn3AiRw1KFtGJKxdAZFr0Cw+eLX6wRbfojjHj3btF&#13;
    Fz91ewpl4ic1np4OPdgAVBFEIb46EROw4iTqa5rZ1oDYMHnUP5e6hsPCJxxU0iJeY2thO/H0BNOj&#13;
    KRA+CbSZKHzcUscKZ1ZyOsNz92E/8QbvEfxu06f1QU/A9Pep6V6qaERSDR48AV9CzQkFLIBr9n9k&#13;
    787ZEFqRQH2EogoCisETNe/6t2Jt2K3QhQk4ttTwz2+TFsXloPmUp+CH9RKUTxI+Qi0cv8hnctzW&#13;
    1VCVxBc7wnJvP8DpeYuyn4rkyJX2FdTgKNp5Qmrr3Sv/l/y59ktaMMslI7PF7Xtp553rKOZ6GjQR&#13;
    7pbjqSYZYbBN2Sq2FPkx9xasxdCvbcgKWfP2Me7/UupQKNAc4AVwo8GWzDtSJVq7WyoW/7NWpsAH&#13;
    f2Luod9YDKXu9sbrxB7ucCafE+PkJ/De3SjK28lLV/gtoUw+UDsCagIQY+GxekLJKUXn7UqTAC3x&#13;
    O+Eel3ZK7Z6EWdBrc6172mRFR/4p6IUpDXhfHVVOtRAm5tCUotBiHFN642z7rJZ3t5WzKT/mst9v&#13;
    VXmulPJ875fUAJf7j811kFMn2v05iOVLXozdK/1kqZTuIcPKeaA/iO54G9/ELAaoyKSDbf05YX2Q&#13;
    2/7ZA3LLvgzto1y6jDsuaxoRLi5bm68oNCU3TfkyucdbLmj1oHVb9FQT5xA8mwFYYa2jo8TeNYVC&#13;
    XWm0S0vJ4pqV66cl++m8AjYIW/LQs/Qj+al39mvWQb/+Y5HV9r8SnOmLAZ6XdmwExSDufzMy7aqx&#13;
    Yaj//rLUPhRLynqtvpRzwUNOEOmK4o/+krnRO7ZcpfLWJMTVitvsYqHgFHuqq29lO5ufY58I/ZU4&#13;
    hS9lNhEwxL32lFZbCE8ubj7YMCkRTJ5FMdjJTrDj+98e5x0hOLilC0x1b9s+NETi9x4EebjECwuO&#13;
    fmThPv7YFJ8bqaK4aLeEVVz0prsn+OGKSMbs+ibMugLXTvqfSJebkaxH6HSgmcMmeoAS4nce+6Nc&#13;
    TGLWm4hZkWvbzly7AZDFIyUhXKb3bNVj577aQPalqA97CiNxtM8kxiRy/lImOkXmcmRZpwUhD/QV&#13;
    IaDe6mteG1/6RxGMGoDjhTqqlWCspXe6K2zqM0dhURWtIk/8vih+ZTYvP6zZMqDVRjFjHJwYOVZ7&#13;
    aPq8i0qw77HgEMxg+tE9U0+F/slVn1Z/ipKPS1erk4qWkD0ozsTeyMmvUu8+0bufNOkNDfc82Wgw&#13;
    raxbLam5D7aGeGorVXshoo9KUG5C72VdKguWbNCskJzwSEBzQG/Nxua9gQcle+T/f7f69aEZyUMa&#13;
    Vfj14qYASvbAfxvN+XDdt698gxzmH+rcXMj8wrUrHtHvsFtRFqoak5z2KgOmqxFv+VqNBi9r2KKi&#13;
    MkmFhIgq3F7iIQcHBYircHizwIG1MzhuIaLgmaOJFMpRIcDjGzN97oW0WFiH3Pe9zfLdjLHBVdhh&#13;
    4iFWCCLKR43JU0PnO50jObyPM5naA5G9TUPWaMpw4n89CfQGCcfZNmnS7zMWcqpkDeLezlpwEWS5&#13;
    Bc+Enqeqe3VBZ65PY0gd06S9+I8RlxzrPX4yV5+0A9z7pFDLi/tfh9lep8W8oeua8e07qRLhUsQ4&#13;
    8C0swsMMeVplGjJuMV7K9PPkBLalRUg40YOsQgV2GSwP2p1VbeI+9e625O8vKIIv7NmJSEW2QS3f&#13;
    PeKNRPtA0K1A+96FEXfAucm4kwUT7dUnVTRwqmzExvqZs6OFbhUXYX94Mb6+tT1hnrHiqO3UkePF&#13;
    mV0mUB0/U81Ea6PYkjreLfbnPQc3c3Q7w7vwQmV+9S61KsxYWuX9BQbVneRw9NknVTSpka+c7ZU5&#13;
    BtNVZbVSwExWNNJiQ1IBmzN2tUi5lDzlSSsT6L4PpcMPnSQwJaX+wvpO5CSujAHoMwjCRgRpuZVV&#13;
    SCxS6/BBDDq2msnkJfD1s9m1LOFJcxDrqrqwTRAumh9XFWTXctY4G6kZr4F/oaniivCu2hyjQL6q&#13;
    fEPcW4bbAJMYiA3irMq+cfgzxs7N5t6dO5AhkZL6IMgsgKGuOM+MKyVbJv2A8RjpBHyy12YZkaRK&#13;
    LElC3GkRJqs5bXw/KfIK60u3siPTUWz/n1bsHtx4OnmnN6qSKOU0vlrqOU3/J4pKe3/+TQI5pnVu&#13;
    6LwCQMH2DMJZrApWXUTaL8IH6CQxCxlK9bS3x1bSYjHwN53T8Y8726Xz1R7e7qZIqn1c5kOJSOzN&#13;
    mZ7rptyygePLr9kwXqhgHYHPnTpGTly/T3JHlk0OKbG7wQiSp4wPqPUCGAyo7GNzeGCKkLFt8EWV&#13;
    zPZHaM98RFyl+J0hz7jsbu1m6WffB9AAxUsMagIKxA+BRsi22G1ChxhiK/JsVXK9f4ZUNZgKPXT9&#13;
    K2jMxG3Ewz/g6l0KabHjjgUm20s8Q6cUbXSEjVfSAFqxpvDiYTvPNyxasushcRP+9b1rx5IHQ99E&#13;
    Bzq11+RYK16Ay4OXyEzvgHS4jwNTeGhyKYO6X2nNICjAWGWtvD6rYkeOJEoIH3j1i4adefPrVsvj&#13;
    34HUuZX/rvYslnQotY1YsAv+5diOGYysj1tQEGKlxTzXCJuw9XOc4Vhy49JcAP2mUTixZx3b4cJK&#13;
    zL7NYYOMNn9nwz6FdXRuN56quh8gJs8mInOXNzS/tfsWi2NnkIC9kVXJmYBugigkyrxrn6h69Bdo&#13;
    t/ZUQksFm3mXBifoEp8FRY5R93Q7qngB/a+jzCzMlFPWpgHjsah0viFfPJ37bpjy3TuyHBRrpgKi&#13;
    nbHd9q53go07/+x8Z7GclhEH/mN1Cj7NpPSZpYjHpOKksUJL3wMKYCcYi5jjRkYuBmBsevHD8FN+&#13;
    qdkpqvfCNmdbOMhcFMErH57u+wvfmcWjkGuePSpFzSHLzDuuCa7sn0gNwfqfXw4n/a2fslleO5BF&#13;
    KnCblYkuT1DTZMHDOaNWtYBm9UsUiFAv7/9qr6cfCCnnLr/o8nZLYOpS3c1On1E6PI2ZOh6jJ/G4&#13;
    SmKG5rsGoufjU7vUBACgAKgQw3JlJO11ggk7qUqdB3va9dUz8EUySut/PydYOXmlmf/+OgrjLjmr&#13;
    ndI64Qkq4dKc9rdevUhAjPSOtpiIIpGHs6x2dEQmCrWINrbJoQUoS+4Xux4pRDlqqQgp+jHyFFfj&#13;
    A/FpZHmgUjjcuBKIUAmAJdgWg9CtyDIXMfYGSsNUi+KAp8DIad8KcnQWjvqRIgMfhHvvUs6G6tRP&#13;
    7dmo5yilVQQJib4YoK2VnttenFCV88k6bNdWc45Hc6FYqg4dQyVT26VUBUPE4rUlmpbD0VunDN2u&#13;
    KmK3qS+CJ3tkTaW+nfoC7IOZG+e2OFKrODwZZ5IMCXW6EdXMUa4VzJbTXuWe004YlCyeufp93pna&#13;
    dy0OzXGH3g8YULaCzI/j09En4CR2rRAy250O8N6g5tlFqK4vgecMcB/5GO5voi8zDoa5JGVN4dk2&#13;
    XHadEhBkVv1552DUzOPPoy0hEJT7aDTY7mzUIKVYA6RbOnAU+cZ2RUFyIJ3dMZx09gSodhgsgES+&#13;
    sIP290Nm0qPY7qcrexTOqK7zWNaV8xpUP7IIjZod3KZe7cNW3maWsjcdNZs8QsawBLx8miFQPUwk&#13;
    syZyfWoMPK4SPsOrpo1O0HI1LYp3e1EWPqoGbEwTD6PostRN1RfEoOGuR5q6TpojTbtURdxUUtbD&#13;
    Ye/615QXYLv0dILuU2kvby8DVxBhEve0fwACnv2qmhlCQSh5QUgoew+nMlc7sNgTk1/aWqq2EpOP&#13;
    35OOCQ/q7s4vCs32+6rRsRzFjYgBmGPjE5EIwue0qL1H7ty+aRSPIhgEIoyGtcfTINH3LyZLjfVa&#13;
    v3lS8xbE/K9C77w/Gah7aJhP3mO1+PFgLhyMUQsJdOTvx9gwFGpVaTPlb41/5I9soO854GDK/7HX&#13;
    4jASZ3NQDpy1jM6e7S3iVP71wgc+r8aAy/cI7cYvDKfVQDiAfNsHAE8KLKfO6LU+fO3eUp37kDty&#13;
    nQ1a3eTI1QQmkUabi1TJkVUc5vQViUasBqhJ1GdlVPdRILiQ4pnwgu+me6yPXqdtanCMTITLkv+T&#13;
    3FaTTvrao8h5rXZ297wP6ObmA8aE5ypNKIxUVxxCsOqlJcbyvfmDMrDfrVIaVlMd5kDrnIMqKpjG&#13;
    oEO8vsxKIfDN7N43sJOSLv6ssGILJk/mn1phzhv0mcoEtQ+LjNDFcY8wipJNQE1Z5H0OzJdW2M0Y&#13;
    qqDyRpGniEqdMn2Vx3eYnkFvJVwAg8PHbD4wixY1tDRI4+rMB9E6dKtZoHnTQRtG881bCmEzLoB5&#13;
    9zDuL71nFOLEb+DDSg/Ups4tOLKRY+68IcfvJ1QsBBQrVLpCHNyTclj5BXiK4fCpZz2vOlwnZZ8/&#13;
    ce45Xm/8jg1w3ly+dCCIZrAdgMvNPs4jJjpSDJEzo1qja8xaM5fbTPQbd27qhwV+xHp4c1igu0E0&#13;
    h02gqMpAHRXdkHH9aLb4t/WcIr6TmbBtW5WCOrOa6Q2rXudoLUmNwK2479vGOjGV6IKflGEQl8Wi&#13;
    CRQ4/ztEfD06j9Rd73M0eL/GdyanrAqbOyAc/z+7oIkM1y4=</xenc:CipherValue>
          </xenc:CipherData>
        </xenc:EncryptedData>
      </saml:EncryptedAssertion>
    </samlp:Response>


=== PAOS response sent to SP ===
SP Endpoint: https://jdennis-test.example.com/mellon/paosResponse

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ecp="urn:oasis:names:tc:SAML:2.0:profiles:SSO:ecp" xmlns:paos="urn:liberty:paos:2003-08" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
  <SOAP-ENV:Header>
    <paos:Response SOAP-ENV:actor="http://schemas.xmlsoap.org/soap/actor/next" SOAP-ENV:mustUnderstand="1" paos:refToMessageID="_5111E9405DFDA53D86B9A7C085DE292F"/>
    <ecp:RelayState SOAP-ENV:actor="http://schemas.xmlsoap.org/soap/actor/next" SOAP-ENV:mustUnderstand="1">https://jdennis-test.example.com/saml-test/protected.html</ecp:RelayState>
  </SOAP-ENV:Header>
  <SOAP-ENV:Body>
    <samlp:Response Destination="https://jdennis-test.example.com/mellon/paosResponse" ID="ID_9914fcf0-00aa-4a92-8776-534dd2389e85" InResponseTo="_2228A05515CD953BDBFB9AF0A6BF615D" IssueInstant="2019-08-19T20:06:31.598Z" Version="2.0">
      <saml:Issuer>https://jdennis-test.example.com:8443/auth/realms/test</saml:Issuer>
      <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:SignedInfo>
          <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          <dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
          <dsig:Reference URI="#ID_9914fcf0-00aa-4a92-8776-534dd2389e85">
            <dsig:Transforms>
              <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
              <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
            </dsig:Transforms>
            <dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
            <dsig:DigestValue>4SbgQn5dLy1zp67MMDxIUgeIretiQR08taIOG8GgTtM=</dsig:DigestValue>
          </dsig:Reference>
        </dsig:SignedInfo>
        <dsig:SignatureValue>c/NmP3gQFYrwF0suhu/e7UyQUBbvoTNmXuU57gtwMXAtiubCWjCDjyGaW4C2G+ucw4JJ4fXwThsG&#13;
+2YM1Yb8k+5tqaYhuPkWsYe6iSUMbm1bE1LAQpSl42vEompTIxuXW/kHwhaE6oSjlAc7rdhmLu1o&#13;
ehFxkEXwZ2nMW35S9QiADLpi9n7GZvMtkU63Z472inHmvaTrThPrHAz1wLHdiaODzOsJ0301M2qU&#13;
caUOa/uSLJS6Yo/CUsKNqkTiqfxsB1p4WA5c4Jzt1XFbv8wmmGtpTFRECXc3WXtY4Cl0m8TUxXHk&#13;
DzkoSULrcozxzb1Y/DyJi02cyHYC51e6O7Ad5Q==</dsig:SignatureValue>
        <dsig:KeyInfo>
          <dsig:KeyName>Hkki4TCNFFywLlp50Yx9luUgeg4G60HSTov3eaecvSw</dsig:KeyName>
          <dsig:X509Data>
            <dsig:X509Certificate>MIIClzCCAX8CBgFpJePdczANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0ZXN0MB4XDTE5MDIy&#13;
NTE4MTk0NFoXDTI5MDIyNTE4MjEyNFowDzENMAsGA1UEAwwEdGVzdDCCASIwDQYJKoZIhvcNAQEB&#13;
BQADggEPADCCAQoCggEBAMz3X7gh2+piYwSFrm4ACRWM1sLEuDv/kJ8fjnnlbR9Rx5zfLIes/vsY&#13;
AZ1HqYVoG/hhPHbNFyQEG9PCtLCDLbXUb8H+a9QAmDQbe/HHpicc0yGlsYNVEd+luXAqJ18nBNnj&#13;
odbnT7XSChMzKx368uEdstAmSuE7bXMwG07zlK0W33gra9MdZUnYRzf/Y/7hlQJdm6n+W5oWb0Uy&#13;
iDJDrfhZRglbRYGuDhJTMqw7GEnZK3RUMcAzfoLeEP3Z5vkJT6T+CMlb+d+CBzmijNAZ4OoiZV8l&#13;
l0PV10BC4Q8eX0hqOyP+8DQ+xvdepQjPW2CnPKngpZA+qROkYbOXG5wRQ38CAwEAATANBgkqhkiG&#13;
9w0BAQsFAAOCAQEAh4HYLOdKJOAd3gl0M/pnCvSxAbkP8FU6+Wp/3MFtmq7fd8FnE8IO2ec1ERT6&#13;
OcDIBMZXN/uQvv1xvbHgcUNgE/4IQxQ8Bg6K3gUbss8cR6b5xymLaIvuHmff5OT5Z0I+i8ilMCl2&#13;
UpHmzvtM8wh8zC0FcWyTbxJcvbu/rjD8DKHxd9/N8X+EmyYgYhzjoQ5MHGwvYcj3wFdIDE2ukZvy&#13;
4ov8FDwCdsVgRb7eHtUj/NsmHOTTJ/9PTi/a7OW4l1C4vr41OYsKEvQH3tCNxDBRJNF7+VvH9sCZ&#13;
nHhLRNlxGuRjpfwu0AJRiuacKsccIPj19qo2MgRgiUWV8lPWmJCMyQ==</dsig:X509Certificate>
          </dsig:X509Data>
          <dsig:KeyValue>
            <dsig:RSAKeyValue>
              <dsig:Modulus>zPdfuCHb6mJjBIWubgAJFYzWwsS4O/+Qnx+OeeVtH1HHnN8sh6z++xgBnUephWgb+GE8ds0XJAQb&#13;
08K0sIMttdRvwf5r1ACYNBt78cemJxzTIaWxg1UR36W5cConXycE2eOh1udPtdIKEzMrHfry4R2y&#13;
0CZK4TttczAbTvOUrRbfeCtr0x1lSdhHN/9j/uGVAl2bqf5bmhZvRTKIMkOt+FlGCVtFga4OElMy&#13;
rDsYSdkrdFQxwDN+gt4Q/dnm+QlPpP4IyVv534IHOaKM0Bng6iJlXyWXQ9XXQELhDx5fSGo7I/7w&#13;
ND7G916lCM9bYKc8qeClkD6pE6Rhs5cbnBFDfw==</dsig:Modulus>
              <dsig:Exponent>AQAB</dsig:Exponent>
            </dsig:RSAKeyValue>
          </dsig:KeyValue>
        </dsig:KeyInfo>
      </dsig:Signature>
      <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
      </samlp:Status>
      <saml:EncryptedAssertion>
        <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
          <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
            <xenc:EncryptedKey>
              <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
              <xenc:CipherData>
                <xenc:CipherValue>C66X026yG1FSDC5fQkOgutBJY3UckBzqhLbRPzhYELdJxUWD5l474MjFi3g2rLUEq2VeH+G5F/fH&#13;
fTO9OpAvSxStO/Pr2F8Wzq9n9tLCyr8RrkQjw48ySYGpQqXIaeVHu4wXa/KrwOSRNdhQ93+A3rK+&#13;
j8YCmtcBtsl69TDyvs9qNRa9UPpF2VtXmRQpAoFemU4k/hU1Fv6FeyUVoxT96bFAXj2DGk6MGI50&#13;
L7rsYHMraKnYtDnJoKlAoUxGD49qFMiyuZydsBSAVVuxlYrOG/CrBRH+bHeZlLgPscVwfntqBYoC&#13;
fpkveHFKPxtoT++VMkwsZZMIyDkp2Z112Nd/4A==</xenc:CipherValue>
              </xenc:CipherData>
            </xenc:EncryptedKey>
          </ds:KeyInfo>
          <xenc:CipherData>
            <xenc:CipherValue>K0o6sqTWSUrs0udAh6gGOQBEfkHDXM3nvYjlsa+qFqbsqvNP9j73FbkNBSeDdCfyy/gdpce0yPz0&#13;
/3sVpipIET0pC2VLi7eLrBSH4R0OkrkWCRcWg2fmNXbUu+/03xDJNCj1JoHQR3UqYxLi9IIBt0BD&#13;
rFcMJoiLqCbRs2BsOvL1w2+VEHs6knhCYajygi3HmIXV9pkkne/KvA56ZqDzKh8Xn1qE4TVtkRmk&#13;
u1psdDYbivV88UL7l7DsgLu6cmswXhNIxCmOkkzFkPWGXPExFsRN11RfYusV2LLlungJp0ZjQkl+&#13;
AkoOs2Ox+8WXlILO0iLO372ECwiPT1hvBuYe+o3BAF2T8vRMGNrGG7DKVnBqck/SJWZh+XAaWgRd&#13;
S6PBDbNEsfoU/QdnpyuW2DuEEwov1BuFOsvP34O2g7QTHL6ywi9q3CbRl2tiIKT0bfqDfYHa533i&#13;
v5fjfmWlocTI7/EiCPPozCWEfitv//B4F3Wa/BFNBULCuOBzVu/XRWm5CwHvgNhaFnxGb24jEzFd&#13;
HUi4vVch8LOcgOJpWlWRWAkBxzJF44skzQGFGTkFYUkpkYUhRxG8+ZFceNz0J0fwKbPI2GptI5Qh&#13;
BEa7PzRFRzjy6CfOURGAiuMqDS/Nvdi7D8Q+cCe1neYX6WGzWFgxxFSHmY0T/Pk+98glNfZF2n48&#13;
lnhFtf9UD/qCcIPg0RPIibig4XFJK9ljLDpqcQsMyMcVN94T1AGZFsOXhH+LMbVcPUtx5xuoX+/N&#13;
HaQpuIwe8Bxw5eYSgsBy9pATJ1kBQsOefXQShbGyOt6TKrwwjObHOIFOIZshg2JJdVG63H5VhwLW&#13;
2e5fCbnNYdE0uerd4udUNHYKHf8XOrfb8IaeO09H+Ct2WAcyDA5ACT4joEKJCFEJMgI9tnIwlQMP&#13;
pq8IIM6o2JDGwwRhsst3gHqNKRN9SRzRY7ZZn2+z1R6WuBaOsAwTRU9cg3b3vxkjEjHkbCGPgPKS&#13;
rg0MoiJThfcuPfDbJKPSryKzb0lgzMCt2rvLiWNZ6xa9/DFYJ0LZLJupWr/sK4apaobwYH1bA9lv&#13;
1vCqL8n3xSvRRblSeGGzrJDP3n1j94ChXmW0M3SfrCw3LCNAR89g9iuPl/gJbBcykLufapiFlRHa&#13;
JjrFBMA9aLF6M8tUGJItqAl8bVsA/QsqrjayWec1IEqARygzZ1KTjOz8FixxhFyb48gRo/AeieUQ&#13;
xv8lJFGsQvE+o4VLBDSI/IvZKnSJbDSh8gLnRr7nweNgrt1WYw5zpjd/9Q1subjsZ1P1oY2lZzQY&#13;
e3o6NTdE2F/4ETJLxme8TLX5pnj2Z2bUVQAseOul0wN3NxOdQ8IlfHPS6HsMl0GeJV6v2hPWo96X&#13;
SytTCCBSI4YKNO341AdP8Ajxvh5KVK/VRUPqakz7IIgdjYuIgOXGFs+gN7/y9Lrte48RmUquwnLh&#13;
KU3JOUY3729Jayvq3cgig6Yi+YVt8P+mTLAhZ89PJZYRf++yE6EJyP0k1BzdvxVgRBVGDtXyWSB0&#13;
NiB0ZagkpHe9np14mn61odoPTUD3OqE/cCssFkxvfqEEyA7yXwHJlFCeUgqojidcJ2xW26AXSPPW&#13;
W2UmTlOOd0dMaW7oSvhYmca7twiXmV+ObJDs5ziGxVh3ULjq5npDYNoDrTMSyb9pxTuot4QSnTB8&#13;
I3zYczsFH8LZcN4cCHMbTwiNkWMIme1E12D8RZHsUoIRdq7/TlpTheeyEdr4jKa3jqccaGOFj+Wk&#13;
lmIQxV0UaWMA0UgMsTRfZUpEJFI9OeH8E3FcInbXL2kmH+iHlEm249SpEexHp192KmO6kTbnH40V&#13;
eElOjD125J8VBbecICINQ9JwYlNq+uD6BUtU9JoYgwic+FBq9zReXLGTmxPcDb/sSla/UJoq/4NO&#13;
UGV4214kC+di/OcCr1J6X1Pp6nIrMqXknnG4wI5dV0t6eTpz0C1/EeKiJrokBFVjkPfq/F9jjHh2&#13;
YDn18etFF55/IicVgGFqvXTpvo6oureKWYQd+bTY0AsODSMYcw8tzmLedMDmmGMHWUspfyOFkM8s&#13;
uBRUqi0TE1FWYygDJ7QT/X2mQEX4cQ5cH0IXU0zIOQkl8N9xCRoA1mGuL+I+B4u3m8bPyBqh9dZ+&#13;
MqTRwMwNFcn8BwEkVzOZ8vbbeTmxYDSXTQftMV8OttRNJEog99gQwH1kazeUOEp/fXCFG4ev74hI&#13;
yOcaQHEECCbuGqfzNmxrwP2NJ8U31d0ZOaP7uXAKy/qBa+UNpJdO6cKVK9qbcVg+KI80xvsMd7W+&#13;
iOpJ00EHBvuoGBn+xo7owuWPugLNfekKVlDInx51fP8zVxrPmKd+zy/CXm6ipY0tiDjLzhwg5uVV&#13;
jFZKROGZt6G4dLkRaiGECvHILc+AfQWmRKabtj+Uckhs7sd41JEmmAwI5PoUEi1nDtEasc15B/8d&#13;
A5X8WwlrFQV5IT9b6JKe58U0FvkHeJJyFhrbwxOSpCRyseZRn1VWzMBuGD7GufrLlH5qiaYrTPt1&#13;
b503fSB+buNRpWf1vPYTVmeL/P1x1bnITe6Tn8OxCUn8oUY3FJEkaiheLJlW/XFTVfLzL3h9XfI8&#13;
8RdMcx9mo5jMyU2t6/Q9w0JqCQNLQdgmyZ/V8NH1druABmvaPavbP2RXZDXvc5lfqpYeo9r0+YD0&#13;
GXTa6yPeu9jkXaV9N9ilHdpJhwOodINEPtb7yzDXsnk7ujnGLdsFFbN34QeKPD+tpyFkOpi/zCPf&#13;
ZEaG/mnGYD2yVcs2+l9FFCeXaSICj62GY6EoGSzSsVZSRMQ8ChWDgDaQCBdrlrIM7Zb5fb6w2yZe&#13;
foBcTWnknMp+QZOVY6/SGqc7rLBawAWm6pGizCrkywARFOAl54KXM4BHqh71TMJd7XqnZWymQQ3g&#13;
ZDuixAKcl+yb0Quex2qrL99OcdDwwOdslZ1eGMakyJt5r6nrAyTS38hibIgA1TJ0+m0H6FDa9Q7x&#13;
OiKrETYc88C0qKBL+Yg1BZVj4LC9uTKYefo2UYPdF3Bde+lziEy/TxvkqHTud/HVELIDz3kqK89e&#13;
i2udobTtKWYwXVIYekxbUoTGPqDKA7uAJNoo3i5dV6i3tht8c9sAOqDmfon85bya+trWRFNCBhiD&#13;
MroJFujlVy1Yw7ct/IEHeAyxwVeTOUe8wjxWn3AiRw1KFtGJKxdAZFr0Cw+eLX6wRbfojjHj3btF&#13;
Fz91ewpl4ic1np4OPdgAVBFEIb46EROw4iTqa5rZ1oDYMHnUP5e6hsPCJxxU0iJeY2thO/H0BNOj&#13;
KRA+CbSZKHzcUscKZ1ZyOsNz92E/8QbvEfxu06f1QU/A9Pep6V6qaERSDR48AV9CzQkFLIBr9n9k&#13;
787ZEFqRQH2EogoCisETNe/6t2Jt2K3QhQk4ttTwz2+TFsXloPmUp+CH9RKUTxI+Qi0cv8hnctzW&#13;
1VCVxBc7wnJvP8DpeYuyn4rkyJX2FdTgKNp5Qmrr3Sv/l/y59ktaMMslI7PF7Xtp553rKOZ6GjQR&#13;
7pbjqSYZYbBN2Sq2FPkx9xasxdCvbcgKWfP2Me7/UupQKNAc4AVwo8GWzDtSJVq7WyoW/7NWpsAH&#13;
f2Luod9YDKXu9sbrxB7ucCafE+PkJ/De3SjK28lLV/gtoUw+UDsCagIQY+GxekLJKUXn7UqTAC3x&#13;
O+Eel3ZK7Z6EWdBrc6172mRFR/4p6IUpDXhfHVVOtRAm5tCUotBiHFN642z7rJZ3t5WzKT/mst9v&#13;
VXmulPJ875fUAJf7j811kFMn2v05iOVLXozdK/1kqZTuIcPKeaA/iO54G9/ELAaoyKSDbf05YX2Q&#13;
2/7ZA3LLvgzto1y6jDsuaxoRLi5bm68oNCU3TfkyucdbLmj1oHVb9FQT5xA8mwFYYa2jo8TeNYVC&#13;
XWm0S0vJ4pqV66cl++m8AjYIW/LQs/Qj+al39mvWQb/+Y5HV9r8SnOmLAZ6XdmwExSDufzMy7aqx&#13;
Yaj//rLUPhRLynqtvpRzwUNOEOmK4o/+krnRO7ZcpfLWJMTVitvsYqHgFHuqq29lO5ufY58I/ZU4&#13;
hS9lNhEwxL32lFZbCE8ubj7YMCkRTJ5FMdjJTrDj+98e5x0hOLilC0x1b9s+NETi9x4EebjECwuO&#13;
fmThPv7YFJ8bqaK4aLeEVVz0prsn+OGKSMbs+ibMugLXTvqfSJebkaxH6HSgmcMmeoAS4nce+6Nc&#13;
TGLWm4hZkWvbzly7AZDFIyUhXKb3bNVj577aQPalqA97CiNxtM8kxiRy/lImOkXmcmRZpwUhD/QV&#13;
IaDe6mteG1/6RxGMGoDjhTqqlWCspXe6K2zqM0dhURWtIk/8vih+ZTYvP6zZMqDVRjFjHJwYOVZ7&#13;
aPq8i0qw77HgEMxg+tE9U0+F/slVn1Z/ipKPS1erk4qWkD0ozsTeyMmvUu8+0bufNOkNDfc82Wgw&#13;
raxbLam5D7aGeGorVXshoo9KUG5C72VdKguWbNCskJzwSEBzQG/Nxua9gQcle+T/f7f69aEZyUMa&#13;
Vfj14qYASvbAfxvN+XDdt698gxzmH+rcXMj8wrUrHtHvsFtRFqoak5z2KgOmqxFv+VqNBi9r2KKi&#13;
MkmFhIgq3F7iIQcHBYircHizwIG1MzhuIaLgmaOJFMpRIcDjGzN97oW0WFiH3Pe9zfLdjLHBVdhh&#13;
4iFWCCLKR43JU0PnO50jObyPM5naA5G9TUPWaMpw4n89CfQGCcfZNmnS7zMWcqpkDeLezlpwEWS5&#13;
Bc+Enqeqe3VBZ65PY0gd06S9+I8RlxzrPX4yV5+0A9z7pFDLi/tfh9lep8W8oeua8e07qRLhUsQ4&#13;
8C0swsMMeVplGjJuMV7K9PPkBLalRUg40YOsQgV2GSwP2p1VbeI+9e625O8vKIIv7NmJSEW2QS3f&#13;
PeKNRPtA0K1A+96FEXfAucm4kwUT7dUnVTRwqmzExvqZs6OFbhUXYX94Mb6+tT1hnrHiqO3UkePF&#13;
mV0mUB0/U81Ea6PYkjreLfbnPQc3c3Q7w7vwQmV+9S61KsxYWuX9BQbVneRw9NknVTSpka+c7ZU5&#13;
BtNVZbVSwExWNNJiQ1IBmzN2tUi5lDzlSSsT6L4PpcMPnSQwJaX+wvpO5CSujAHoMwjCRgRpuZVV&#13;
SCxS6/BBDDq2msnkJfD1s9m1LOFJcxDrqrqwTRAumh9XFWTXctY4G6kZr4F/oaniivCu2hyjQL6q&#13;
fEPcW4bbAJMYiA3irMq+cfgzxs7N5t6dO5AhkZL6IMgsgKGuOM+MKyVbJv2A8RjpBHyy12YZkaRK&#13;
LElC3GkRJqs5bXw/KfIK60u3siPTUWz/n1bsHtx4OnmnN6qSKOU0vlrqOU3/J4pKe3/+TQI5pnVu&#13;
6LwCQMH2DMJZrApWXUTaL8IH6CQxCxlK9bS3x1bSYjHwN53T8Y8726Xz1R7e7qZIqn1c5kOJSOzN&#13;
mZ7rptyygePLr9kwXqhgHYHPnTpGTly/T3JHlk0OKbG7wQiSp4wPqPUCGAyo7GNzeGCKkLFt8EWV&#13;
zPZHaM98RFyl+J0hz7jsbu1m6WffB9AAxUsMagIKxA+BRsi22G1ChxhiK/JsVXK9f4ZUNZgKPXT9&#13;
K2jMxG3Ewz/g6l0KabHjjgUm20s8Q6cUbXSEjVfSAFqxpvDiYTvPNyxasushcRP+9b1rx5IHQ99E&#13;
Bzq11+RYK16Ay4OXyEzvgHS4jwNTeGhyKYO6X2nNICjAWGWtvD6rYkeOJEoIH3j1i4adefPrVsvj&#13;
34HUuZX/rvYslnQotY1YsAv+5diOGYysj1tQEGKlxTzXCJuw9XOc4Vhy49JcAP2mUTixZx3b4cJK&#13;
zL7NYYOMNn9nwz6FdXRuN56quh8gJs8mInOXNzS/tfsWi2NnkIC9kVXJmYBugigkyrxrn6h69Bdo&#13;
t/ZUQksFm3mXBifoEp8FRY5R93Q7qngB/a+jzCzMlFPWpgHjsah0viFfPJ37bpjy3TuyHBRrpgKi&#13;
nbHd9q53go07/+x8Z7GclhEH/mN1Cj7NpPSZpYjHpOKksUJL3wMKYCcYi5jjRkYuBmBsevHD8FN+&#13;
qdkpqvfCNmdbOMhcFMErH57u+wvfmcWjkGuePSpFzSHLzDuuCa7sn0gNwfqfXw4n/a2fslleO5BF&#13;
KnCblYkuT1DTZMHDOaNWtYBm9UsUiFAv7/9qr6cfCCnnLr/o8nZLYOpS3c1On1E6PI2ZOh6jJ/G4&#13;
SmKG5rsGoufjU7vUBACgAKgQw3JlJO11ggk7qUqdB3va9dUz8EUySut/PydYOXmlmf/+OgrjLjmr&#13;
ndI64Qkq4dKc9rdevUhAjPSOtpiIIpGHs6x2dEQmCrWINrbJoQUoS+4Xux4pRDlqqQgp+jHyFFfj&#13;
A/FpZHmgUjjcuBKIUAmAJdgWg9CtyDIXMfYGSsNUi+KAp8DIad8KcnQWjvqRIgMfhHvvUs6G6tRP&#13;
7dmo5yilVQQJib4YoK2VnttenFCV88k6bNdWc45Hc6FYqg4dQyVT26VUBUPE4rUlmpbD0VunDN2u&#13;
KmK3qS+CJ3tkTaW+nfoC7IOZG+e2OFKrODwZZ5IMCXW6EdXMUa4VzJbTXuWe004YlCyeufp93pna&#13;
dy0OzXGH3g8YULaCzI/j09En4CR2rRAy250O8N6g5tlFqK4vgecMcB/5GO5voi8zDoa5JGVN4dk2&#13;
XHadEhBkVv1552DUzOPPoy0hEJT7aDTY7mzUIKVYA6RbOnAU+cZ2RUFyIJ3dMZx09gSodhgsgES+&#13;
sIP290Nm0qPY7qcrexTOqK7zWNaV8xpUP7IIjZod3KZe7cNW3maWsjcdNZs8QsawBLx8miFQPUwk&#13;
syZyfWoMPK4SPsOrpo1O0HI1LYp3e1EWPqoGbEwTD6PostRN1RfEoOGuR5q6TpojTbtURdxUUtbD&#13;
Ye/615QXYLv0dILuU2kvby8DVxBhEve0fwACnv2qmhlCQSh5QUgoew+nMlc7sNgTk1/aWqq2EpOP&#13;
35OOCQ/q7s4vCs32+6rRsRzFjYgBmGPjE5EIwue0qL1H7ty+aRSPIhgEIoyGtcfTINH3LyZLjfVa&#13;
v3lS8xbE/K9C77w/Gah7aJhP3mO1+PFgLhyMUQsJdOTvx9gwFGpVaTPlb41/5I9soO854GDK/7HX&#13;
4jASZ3NQDpy1jM6e7S3iVP71wgc+r8aAy/cI7cYvDKfVQDiAfNsHAE8KLKfO6LU+fO3eUp37kDty&#13;
nQ1a3eTI1QQmkUabi1TJkVUc5vQViUasBqhJ1GdlVPdRILiQ4pnwgu+me6yPXqdtanCMTITLkv+T&#13;
3FaTTvrao8h5rXZ297wP6ObmA8aE5ypNKIxUVxxCsOqlJcbyvfmDMrDfrVIaVlMd5kDrnIMqKpjG&#13;
oEO8vsxKIfDN7N43sJOSLv6ssGILJk/mn1phzhv0mcoEtQ+LjNDFcY8wipJNQE1Z5H0OzJdW2M0Y&#13;
qqDyRpGniEqdMn2Vx3eYnkFvJVwAg8PHbD4wixY1tDRI4+rMB9E6dKtZoHnTQRtG881bCmEzLoB5&#13;
9zDuL71nFOLEb+DDSg/Ups4tOLKRY+68IcfvJ1QsBBQrVLpCHNyTclj5BXiK4fCpZz2vOlwnZZ8/&#13;
ce45Xm/8jg1w3ly+dCCIZrAdgMvNPs4jJjpSDJEzo1qja8xaM5fbTPQbd27qhwV+xHp4c1igu0E0&#13;
h02gqMpAHRXdkHH9aLb4t/WcIr6TmbBtW5WCOrOa6Q2rXudoLUmNwK2479vGOjGV6IKflGEQl8Wi&#13;
CRQ4/ztEfD06j9Rd73M0eL/GdyanrAqbOyAc/z+7oIkM1y4=</xenc:CipherValue>
          </xenc:CipherData>
        </xenc:EncryptedData>
      </saml:EncryptedAssertion>
    </samlp:Response>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

=== Send PAOS response to SP, if successful SP resource is returned ===

Request:
  url = https://jdennis-test.example.com/mellon/paosResponse
  method = POST
  Headers:
    Accept: */*
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Content-Length: 13179
    Content-Type: application/vnd.paos+xml
    User-Agent: python-requests/2.20.0

Response:
  Status = 303
  Headers:
    Cache-Control: private, max-age=0, must-revalidate
    Connection: Keep-Alive
    Content-Length: 264
    Content-Type: text/html; charset=iso-8859-1
    Date: Mon, 19 Aug 2019 20:06:31 GMT
    Keep-Alive: timeout=5, max=99
    Location: https://jdennis-test.example.com/saml-test/protected.html
    Server: Apache/2.4.39 (Fedora) OpenSSL/1.1.1c
    Set-Cookie: mellon-cookie=d7b5b3f2abdfb207b3dd1036290fad15; Version=1; Path=/; Domain=jdennis-test.example.com;

Request:
  url = https://jdennis-test.example.com/saml-test/protected.html
  method = GET
  Headers:
    Accept: */*
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    Cookie: mellon-cookie=d7b5b3f2abdfb207b3dd1036290fad15
    User-Agent: python-requests/2.20.0

Response:
  Status = 200
  Headers:
    Accept-Ranges: bytes
    Cache-Control: private, max-age=0, must-revalidate
    Connection: Keep-Alive
    Content-Length: 209
    Content-Type: text/html; charset=UTF-8
    Date: Mon, 19 Aug 2019 20:06:31 GMT
    ETag: "d1-57b9aa0a4d398"
    Keep-Alive: timeout=5, max=98
    Last-Modified: Tue, 27 Nov 2018 00:35:33 GMT
    Server: Apache/2.4.39 (Fedora) OpenSSL/1.1.1c

=== SP Resource ===
<html>
  <body>
    <h1>This is a SAML protected page.</h1>
    <a href="https://jdennis-test.example.com/mellon/logout?ReturnTo=https://jdennis-test.example.com/logged-out.html">Log out</a>
  </body>
</html>

