﻿<?xml version="1.0" encoding="utf-8"?>
<saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_d63994ed-3e25-4fa6-9acc-cd913cf08e44" IssueInstant="2015-03-18T09:23:13.579Z" xmlns:xs="http://www.w3.org/2001/XMLSchema" Version="2.0">
  <saml2:Issuer Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">urn:gda:sts</saml2:Issuer>
  <saml2:Subject>
    <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:unspecified">1.2.40.0.34.3.1.1000</saml2:NameID>
    <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
      <saml2:SubjectConfirmationData />
    </saml2:SubjectConfirmation>
  </saml2:Subject>
  <saml2:Conditions NotBefore="2015-03-18T09:23:13.639Z" NotOnOrAfter="2015-03-18T13:23:13.639Z">
    <saml2:AudienceRestriction>
      <saml2:Audience>https://elga-online.at/ETS</saml2:Audience>
    </saml2:AudienceRestriction>
  </saml2:Conditions>
  <saml2:AuthnStatement AuthnInstant="2015-03-18T09:23:13.639Z">
    <saml2:AuthnContext>
      <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac.classes:x509</saml2:AuthnContextClassRef>
    </saml2:AuthnContext>
  </saml2:AuthnStatement>
  <saml2:AttributeStatement>
    <saml2:Attribute FriendlyName="XSPA Subject" Name="urn:oasis:names:tc:xacml:1.0:subject:subject-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
      <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Dr. John Zoidberg</saml2:AttributeValue>
    </saml2:Attribute>
    <saml2:Attribute FriendlyName="XSPA Organization" Name="urn:oasis:names:tc:xspa:1.0:subject:organization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
      <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Wels-Grieskirchen-KL</saml2:AttributeValue>
    </saml2:Attribute>
    <saml2:Attribute FriendlyName="XSPA Organization ID" Name="urn:oasis:names:tc:xspa:1.0:subject:organization-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
      <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyURI">1.2.40.0.34.3.1.1000</saml2:AttributeValue>
    </saml2:Attribute>
    <saml2:Attribute FriendlyName="ELGA OID Issuing Authority" Name="urn:elga:bes:2013:OIDIssuingAuthority" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
      <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1.2.40.0.34.3.1.1000</saml2:AttributeValue>
    </saml2:Attribute>
  </saml2:AttributeStatement>
  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
      <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
      <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
      <Reference URI="#_d63994ed-3e25-4fa6-9acc-cd913cf08e44">
        <Transforms>
          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
          <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
            <InclusiveNamespaces PrefixList="xs" xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" />
          </Transform>
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
        <DigestValue>K8SnlT1JyOe2W0w8BAKNjsBevAErfqWfwHVChVEiTw8=</DigestValue>
      </Reference>
    </SignedInfo>
    <SignatureValue>b75gedKSG8DMKtnjJBtCaNG45+S6wAIjFqZIws9h+Hlmtac4Ey2M5xecjo52fcRg1FCmvWj8AA9hNGeRUB2hrgIQAhsymC6yPjBmfZ9YuCosXCqUMvPik/mTgWvDvGKlFnnaEK1D8b9TNj4bxubBLVZj0u5cKMaErSwqBeCtVXAZJpI11NbGO1+C22gBlYeElRBid1QgKY06J3DOed+3sscrvMyRC58iBhX7lMg8ysvVsgT3iodfaOY3WxroV1F6Aru2Vd9aKsiInbZRZ5cyxk5WJ+bIFNPhIvReBXXrFlID/2jRxquyqjUBRjbbR2GEQVB6JwFY12V6+a3jb1Wbbw==</SignatureValue>
    <KeyInfo>
      <X509Data>
        <X509Certificate>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</X509Certificate>
      </X509Data>
    </KeyInfo>
  </Signature>
</saml2:Assertion>