<?xml version='1.0' encoding='UTF-8'?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" ID="_r-2922d493c8d94ab9bfd302b4254e13ea" Version="2.0" IssueInstant="2026-11-10T15:53:30Z" Destination="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"/><ds:Reference URI="#_r-2922d493c8d94ab9bfd302b4254e13ea"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>pW20YZ0ELoea4xr/Kh2e8vfKPzdBoakU39nqVDrNP+Y=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>HnuAgnfLuioj/039tLJVpjrQ9KfvoZ4VmNJIBgb3jkE=</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_a-61d79b1e7b4e45d1a8ad6a62f6ec766f" Version="2.0" IssueInstant="2026-11-10T15:53:30Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2026-11-10T15:58:30Z" Recipient="https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-10T15:52:30Z" NotOnOrAfter="2026-11-10T15:58:30Z"><saml:AudienceRestriction><saml:Audience>https://mein-portal.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2026-11-10T15:53:30Z" SessionIndex="bugbounty-772294d48ca6482b9cd56d307ce66d92"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:PartnerId"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:WebserviceId"><saml:AttributeValue>baloise-venta</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:FirstName"><saml:AttributeValue>bugbounty</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:LastName"><saml:AttributeValue>dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:Email"><saml:AttributeValue>bugbounty-dwbzn@example.invalid</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>