<saml:Assertion
  ID="idvalue31231231231312"
  IssueInstant="2001-12-31T12:00:00"
  Version="2.0"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  xmlns:xs="http://www.w3.org/2001/XMLSchema"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
  xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion http://docs.oasis-open.org/security/saml/v2.0/saml-schema-assertion-2.0.xsd
   http://www.w3.org/2000/09/xmldsig# http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd">
  <saml:Issuer>http://SomeIdentityProvider.dk/IdpService</saml:Issuer>
  <saml:Subject>
    <!-- Here we have the persistent, opaque identifier -->
    <saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">
      005a06e0-ad82-110d-a556-004005b13a2b
    </saml:NameID>
    <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
      <saml:SubjectConfirmationData
        Recipient="http://SomeServiceProvider.dk"
        NotOnOrAfter="2001-12-31T12:00:00"
        InResponseTo="Authn_request_identifier_1234567">
      </saml:SubjectConfirmationData>
    </saml:SubjectConfirmation>
  </saml:Subject>
  <saml:Conditions>
    <saml:AudienceRestriction>
      <saml:Audience>http://SomeServiceProvider.dk</saml:Audience>
    </saml:AudienceRestriction>
  </saml:Conditions>
  <saml:AuthnStatement
    AuthnInstant="2005-01-31T12:00:00Z"
    SessionIndex="29393948329">
    <saml:AuthnContext>
      <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:X509</saml:AuthnContextClassRef>
    </saml:AuthnContext>
  </saml:AuthnStatement>
  <saml:AttributeStatement>
    <!-- Assurance Level Core Attribute -->
    <saml:Attribute
      NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
      Name="dk:gov:saml:attribute:AssuranceLevel">
      <saml:AttributeValue xsi:type="xs:string">4</saml:AttributeValue>
    </saml:Attribute>
    <!-- SpecVer Core Attribute -->
    <saml:Attribute
      NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
      Name="dk:gov:saml:attribute:SpecVer">
      <saml:AttributeValue xsi:type="xs:string">DK-SAML-2.0</saml:AttributeValue>
    </saml:Attribute>
  </saml:AttributeStatement>
</saml:Assertion>