<?xml version='1.0' encoding='UTF-8'?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_68873f4d140e48d98decad8f448e4add" Version="2.0" IssueInstant="2026-11-15T01:41:59Z" Destination="https://va.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_68873f4d140e48d98decad8f448e4add"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>Q60oAnDuBfwB/SJGKIcgaVVq6M0ExZKjRF+NY4rFa10=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ebFErn3jBgZ0FV12r1nwnc29vqAJ+0Y5vPJj9W2U9RkmCoqKvA6ZkItyCommOBGpJkg+02Qo1i5A0UQcKqZDSoXDPGQL342fRQ5J8yysDoBhTAieWliEHOAlKA1kSFpfe+450PIgs1aa8bBE5z8iHkO4g+uYBQJQZL5JWannWbgmF4oEGd+HnjWxbiVHp8n+M8U/CqSZ7b7pN5VJzlkFHeYOPtZE7T+LHR0vOlh7tfq+kMDPPg5NTHFAftrycIGOlIZwonEEMNjQX8pHZ+oToh4g1EcCftjqLpipRoDEAPkBgrJTbPARacyO6L8dD9eglGskdRorxWvuobOqZsF+yA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIE7TCCA9WgAwIBAgISBkOzmYtgrRJ13hnLsmGTZ0nfMA0GCSqGSIb3DQEBCwUA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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_374baf49d7dd4ac39831a8feb3ece957" Version="2.0" IssueInstant="2026-11-15T01:41:59Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_374baf49d7dd4ac39831a8feb3ece957"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>hp8goG4zrJXijmFXrGdvR0vnKuOOlXYRCX9ZARaxbU8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WOBZMjhdTKizLgqWeQjpGvMNfl1br/hesJuA4yRS03T9NLdWdgSjYkU4rvdvAnlk4GTeheF+gdz7ap4Iel341wx/FoJOH41Spvvxt8oPNxJh9ZjwrDw4gUbbO4dtOz6Av57N8uA4jWVxfndcB1gvWWf/ryqyVMq84WXaWtIpQjsjBACLoBEacFDMpkoZbIEUttpnKbrjfmb2KX99CHs4ovHIkYZySzAmGe4HIxgIpGr7Ae00NH0e4/mHSniXzv2cnK9Cw00LZi+ewCni+nmEQQafxjLQLf2OSxuLw7J5tbQ35WRHjyNDaLdMQB6IigNVEKrj4wNFsZqn/GAF9eXDqQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIE7TCCA9WgAwIBAgISBkOzmYtgrRJ13hnLsmGTZ0nfMA0GCSqGSIb3DQEBCwUA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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData Recipient="https://va.baloise.de/auth/rest/public/baloise/saml2/transform" NotOnOrAfter="2026-11-15T01:51:59Z"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-15T01:39:59Z" NotOnOrAfter="2026-11-15T01:51:59Z"><saml:AudienceRestriction><saml:Audience>https://va.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2026-11-15T01:41:59Z" SessionIndex="bugbounty-8b6fb0f5e1484e77a65fbf906a42000d"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:PartnerId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:PartnerID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:WebserviceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:service:WebserviceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="PartnerId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="PartnerID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="WebserviceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="UserToken" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn@invalid.example</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>