chromium/chrome/test/data/webui/gaia_auth_host/saml_with_password_attributes.xml

<samlp:Response ID="_b8afb9ac-43e8-48f4-9fed-3140e2341c49"
                Version="2.0"
                IssueInstant="2019-02-22T11:51:03.561Z"
                Destination="https://www.google.com/a/example.com/acs"
                Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified"
                InResponseTo="cppcinkhfplikcngllgnbodnjlbeolappkepmcik"
                xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
  <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://samlserver.example.com/adfs/services/trust</Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
  </samlp:Status>
  <Assertion ID="_573cbf2c-2f08-428c-8cbf-2f4d6307baaf"
             IssueInstant="2019-02-22T11:51:03.546Z"
             Version="2.0"
             xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
    <Issuer>http://example.com/adfs/services/trust</Issuer>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
        <ds:Reference URI="#_573cbf2c-2f08-428c-8cbf-2f4d6307baaf">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
          <ds:DigestValue>2OU6vFwZC7WtR4pZDzLw/H+GIoOWJXQqZkWRz4gtSwk=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>Xl0SOKkQTjhzJOS9g7os+bit6i8P/RD0sfXI7dNzhaIF+xj49Rc3v5qJR92+xIFxp05iDhZDCv3CM/IjFvn9M3FDCQYYloV09qmpbRebdkR/npB6wir377gBK8K1Mnafv87A2QfxnpezIQhlyE4fj9LoRVeExNe44Ly2ZqWtXUtmXzX6TaDsWCIxlsuG1PFPLiw7RKTYURmZDNEo9FoDjl8ZQT2zPN8uebgAkQXAk9BbKqnUmrlEs/jyRe1rHNJhe10XmbytbDK5TLOW8q1fCxzrL/rd3EdrIUtJZkmE29QMqmtzK8oOxMaxOL+Q4Tx9F/x21yJW4KCxotcP8PnhIg==</ds:SignatureValue>
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
         <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </KeyInfo>
    </ds:Signature>
    <Subject>
      <NameID>[email protected]</NameID>
      <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <SubjectConfirmationData InResponseTo="cppcinkhfplikcngllgnbodnjlbeolappkepmcik"
                                 NotOnOrAfter="2019-02-22T11:56:03.561Z"
                                 Recipient="https://www.google.com/a/example.com/acs" />
      </SubjectConfirmation>
    </Subject>
    <Conditions NotBefore="2019-02-22T11:51:03.546Z" NotOnOrAfter="2019-02-22T12:51:03.546Z">
      <AudienceRestriction>
        <Audience>google.com/a/example.com</Audience>
      </AudienceRestriction>
    </Conditions>
    <AttributeStatement>
      <Attribute Name="http://schemas.google.com/saml/2019/passwordmodifiedtimestamp">
        <AttributeValue>131953098584212478</AttributeValue>
      </Attribute>
      <Attribute Name="http://schemas.google.com/saml/2019/passwordexpirationtimestamp">
        <AttributeValue>131963466584212478</AttributeValue>
      </Attribute>
      <Attribute Name="http://schemas.google.com/saml/2019/passwordchangeurl">
        <AttributeValue>https://example.com/adfs/portal/updatepassword/</AttributeValue>
      </Attribute>
    </AttributeStatement>
    <AuthnStatement AuthnInstant="2019-02-22T11:51:03.358Z" SessionIndex="_573cbf2c-2f08-428c-8cbf-2f4d6307baaf">
      <AuthnContext>
        <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</AuthnContextClassRef>
      </AuthnContext>
    </AuthnStatement>
  </Assertion>
</samlp:Response>