<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">
    <soapenv:Header xmlns:wsa="http://www.w3.org/2005/08/addressing">
        <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="true">
            <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="Timestamp-3978558">
                <wsu:Created>2013-11-05T16:59:59.280Z</wsu:Created>
                <wsu:Expires>2013-11-05T17:04:59.280Z</wsu:Expires>
            </wsu:Timestamp>
        </wsse:Security>
    </soapenv:Header>
    <soapenv:Body>
        <wst:RequestSecurityTokenResponseCollection xmlns:wst="http://docs.oasis-open.org/ws-sx/ws-trust/200512/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xsi:schemaLocation="http://docs.oasis-open.org/ws-sx/ws-trust/200512/ http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-trust-1.3.xsd">
            <wst:RequestSecurityTokenResponse>
                <wst:TokenType>urn:elga:bes:2013:service:assertion</wst:TokenType>
                <wst:RequestedSecurityToken>
                    <saml2:Assertion ID="_17690042-96d5-4765-bf3c-9a38a2f5ffe7" IssueInstant="2013-10-18T05:16:07.784Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema">
                        <saml2:Issuer Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">urn:elga:sts</saml2:Issuer>
                        <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                            <ds:SignedInfo>
                                <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                                <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
                                <ds:Reference URI="#_17690042-96d5-4765-bf3c-9a38a2f5ffe7">
                                    <ds:Transforms>
                                        <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
                                        <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                                            <ec:InclusiveNamespaces PrefixList="xs" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                                        </ds:Transform>
                                    </ds:Transforms>
                                    <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                                    <ds:DigestValue>HTR8EyqiB7d4W1IRfdrMD/HnqsU=</ds:DigestValue>
                                </ds:Reference>
                            </ds:SignedInfo>
                            <ds:SignatureValue>r2Vnol6VT0SeLGpSTjBSG+aK1Oe5tGyp3xe4BSvwytY/1Em4YJi/8Qaxml3Fa17qDBvQKEpJ
CWu2BXSiA9b9RuLkm1YJGMb2R9X+boO/1jVUtYh2ASQkCVEZuq0CQeubAI+3/2IsNdqvnt6Jg6IK1n3waiQJj1sEgSC
8Ll+tE+6sY/gpOF/BS4/d45OMHk70tdfBkehvTtVBtFbc6vQRWsAQS6FxFCXupw7O8Zozy7jcFIrn6yG70PCszL16U02+t
ESOkd0XuQnMnmBtAt/LzKKPOEyXazLK3OwtFXYQ3F+E4EToGsMmPRtCzE7JhMf86keEd16P0nwqNKV4hwyJAg==</ds:SignatureValue>
                            <ds:KeyInfo>
                                <ds:X509Data>
                                    <ds:X509Certificate>MIIDxTCCAq2gAwIBAgIBAjANBgkqhkiG9w0BAQUFADBrMQswCQYDVQQGEwJBVDEQMA4GA1UECAwH QXVzdHJpYTENMAsGA1UEBwwEV2VsczESMBAGA1UECgwJeC10ZW50aW9uMQwwCgYDVQQLDANFSFMx GTAXBgNVBAMMEHgtdGVudGlvbiBFSFMgQ0EwHhcNMTExMTE1MTQ1MzAzWhcNMTcwNTA3MTQ1MzAz
                                        WjBkMQswCQYDVQQGEwJBVDEQMA4GA1UECAwHQXVzdHJpYTESMBAGA1UECgwJeC10ZW50aW9uMQww CgYDVQQLDANFSFMxITAfBgNVBAMMGHh0ZGNlaHNkZXZlZ3Bndi5rcy5sb2NhbDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOmutmqjmoXrNzY6deSplxban6fP6jcXifHNSGCmH/i4obuv
                                        2G4jITAX45+9rQKySO5GNX/LjAaXEJ/sSR0+XjrcCBLYps2y3AqqBeD8IvU9qkloTrZptE2Wwz4M 2u+cBwWPgzfGWBSvQuadoMCvszbrNx+RZASTHhXCiHEQTOIBxDzGacA+FftGnYKjUimc2Jun66Dg xr6bqm96vNEdrSW5TrTc0WQoRMAMrn8oCZa5Q7ivMNWwUr1xhk9cQLM1zJKKKIwuZXjYm4kN+WS2
                                        EbeIh9Odf1m4giOErM5fISsi3d8OcUirotOZvAhNz8Px0xcjFQvfFN/UiqMrrIc3zmECAwEAAaN7 MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNh dGUwHQYDVR0OBBYEFOAY8oDxI5fz+4FQ+cHoY4vUQA1JMB8GA1UdIwQYMBaAFIdKpsROaHFGS5wW
                                        yJjz5cM/Z9rEMA0GCSqGSIb3DQEBBQUAA4IBAQB01xayaCYYuumT/cJVdo+hoq8lwJTbsH/bac3a XwXDTIqf3mcBK7wh7JyDusUh2ucFLtC8YNTEC7xMWtLgneXGZkAZjA7cau/lOzu3er4+zKbxqUed mQ06OZoTDZcz+xRTqrE/9scMoIDHbpx7W1UQUtfqnLvoKTOOifAcZMKZ5LHKUnfW46kZCQAqCCKT
                                        B8l4fKo5s0QUSUzcJqkjsBMaA55kiG5/uHf50nJAeBW4M8DTzpKNyou2NsQMY1YOTaNGJf5GiERQ EctXQxOhv72pY+ujxoQWhiYoweMUzyE7Q3F3SuT56+cJAhsnCLVvBNybl+TzDzoCxX69N1Q1+Ycr</ds:X509Certificate>
                                </ds:X509Data>
                            </ds:KeyInfo>
                        </ds:Signature>
                        <saml2:Subject>
                            <saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">AdminID</saml2:NameID>
                            <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"/>
                        </saml2:Subject>
                        <saml2:Conditions NotBefore="2013-10-18T05:16:07.784Z" NotOnOrAfter="2013-10-18T09:15:07.784Z">
                            <saml2:AudienceRestriction>
                                <saml2:Audience>https://elga-online.at/adminstration</saml2:Audience>
                            </saml2:AudienceRestriction>
                            
                        </saml2:Conditions>
                        <saml2:AuthnStatement AuthnInstant="2013-10-18T05:16:07.784Z" SessionIndex="123456">
                            <saml2:AuthnContext>
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession</saml2:AuthnContextClassRef>
                            </saml2:AuthnContext>
                        </saml2:AuthnStatement>
                        <saml2:AttributeStatement>
                            <saml2:Attribute FriendlyName="XSPA Subject" Name="urn:oasis:names:tc:xacml:1.0:subject:subject-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                                <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">Massimiliano Masi</saml2:AttributeValue>
                            </saml2:Attribute>
                           <saml2:Attribute Name="urn:oasis:names:tc:xacml:2.0:subject:role">
                               <saml2:AttributeValue>
                                   <Role code="ADMINISTRATOR" codeSystem="1.2.40.0.34.5.3" codeSystemName="ELGA rollen" displayName="Administrator" xmlns="urn:hl7-org:v3"/>
                               </saml2:AttributeValue>
                           </saml2:Attribute>
                           <saml2:Attribute FriendlyName="Permissions" Name="urn:elga:bes:permission">
                                <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string"> urn:elga:bes:2013:permission:_1002</saml2:AttributeValue>    
                            </saml2:Attribute>
                            <saml2:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:purposeofuse">
                                <saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string"> SERVICE</saml2:AttributeValue>
                            </saml2:Attribute>
                        </saml2:AttributeStatement>
                    </saml2:Assertion>
                </wst:RequestedSecurityToken>
            </wst:RequestSecurityTokenResponse>
        </wst:RequestSecurityTokenResponseCollection>
    </soapenv:Body>
</soapenv:Envelope>
