Integration  KIT IDP

Here is your SAML2 assertion for EPR INT Emedo Egger. You can now get a XUA assertion with the Get-X-User-Assertion transaction in your EPR community.

Back to home.

XML inspector

Please be aware that reformatting the assertion makes the signature invalid. Don't try to use this one.

<saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="Assertion_6825e389-c072-4242-a6f0-b4cd2fbbdb2d" IssueInstant="2026-08-31T06:36:47.832Z" Version="2.0">
  <saml2:Issuer>urn:oid:2.16.756.5.30.1.999.9.1.1.1</saml2:Issuer>
  <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    <ds:SignedInfo>
      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
      <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <ds:Reference URI="#Assertion_6825e389-c072-4242-a6f0-b4cd2fbbdb2d">
        <ds:Transforms>
          <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
          <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        </ds:Transforms>
        <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
        <ds:DigestValue>ZsxLJOwZ2mpi0ABXJ8Uioq0oxekO4TAu0hGaTDxsRC8=</ds:DigestValue>
      </ds:Reference>
    </ds:SignedInfo>
    <ds:SignatureValue>
Sgumzk64Y8nQyMTUTk1CK18Afh2YWTefZvJpTjjQnNQ1jzHyMcqNLhZGEgGe1xpAyhg2l26AjQnN&#13;
FvTfnFTtsJ5NGrodSuYM+MMIQKdqpAS8lMygC5LK4ke6ofLBO0YB6eW2t8aRINLr/M0rTnbwPGI7&#13;
ddjFT8wki8pChoObPQsGTmHtBsTlHDgvJaZxp0x6lhqtChPxtmxTYF3aTsqctyFYbO1q79rugK1Z&#13;
+gI6p91BGMLYJQOmn9roVbGITWcjlwH51keQ2yywCmKBC5QtBnViQItDLsfNpMtlDUm0+KwRbs6q&#13;
f3uPRhrE6Kz1GXPIysYcvIbmyRU3EaL1EC5p4Ti9AFsRZsp741pLCa+4cfqf72dv9hjZaJHGfWNG&#13;
CEmY8P9cFowKd7iBDhWg1Xd7TwlNjd5Z7x5XFC7Dn+A24FxmQzU2X6hT+90rt/qphh+khBaMXjqe&#13;
ZckEon0gp5WC2sfpJGtn40LE0bawG5/jenS9KS3NkNMQeB6gtQJr/jk6
</ds:SignatureValue>
    <ds:KeyInfo>
      <ds:X509Data>
        <ds:X509Certificate>MIIF7TCCBNWgAwIBAgIQDZhhRiAxrc68r5XBawgIyzANBgkqhkiG9w0BAQsFADBTMQswCQYDVQQG
EwJVUzEWMBQGA1UEChMNRGlnaUNlcnQgSW5jLjEsMCoGA1UEAxMjRGlnaUNlcnQgUHJpdmF0ZSBT
U0wgU0hBMjU2IENBIC0gRzIwHhcNMjYwNjI1MDAwMDAwWhcNMjcwNzA4MjM1OTU5WjCBlDELMAkG
A1UEBhMCQ0gxEjAQBgNVBAcTCUVwYWxpbmdlczENMAsGA1UEChMEQ0FSQTEWMBQGA1UECxMNMjAw
MDA0MDAzMDgyOTEmMCQGA1UEAwwddGN1X2NhcmFpa2l0X2ludF9vbGl2ZXJfZWdnZXIxIjAgBgkq
hkiG9w0BCQEWE2ludGVncmF0aW9uQGNhcmEuY2gwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGK
AoIBgQC7qH6aCPpKCzf4FUnP9VF6v6UCE9zu/jz3uQj0sN1FII3saEIvwg1tsUkcr6hKvoVYT4by
Uuz6zEP+zPlqNVXKaDL2WnnXJMpOsWcVAYNrMJIF4LmO2MvrmdP9dooZvDWgX933IjJnlYYjpJ/o
3QxeQ7z88Ra3e32kHZtiMUH1VmtPiPG21wyZ5urwUvMXlp5AwskylfarGuERJE1YY4+nPYIEi41E
F/dVsdOU53QfUxZiXOfaS7xrPT25v5oPtAJcOoQpSM82UHDiScpF0pDhOMjWyqKyA8ApxZS0clrG
OIYwk+iGLu1Di/Ph5W5mN+0FqbtRPBJknNShdd5NdzUXqpCHXW8aq2d5sSmQqKdod8OnrIBt8oKh
P8kiJ+Lo9j7X4bme0mzptq15vKaPlRImCS62v1FfdZmxb3qHFC71a5Uhv2Kz4WtSTJPXwqhH6RUQ
4VLULvuEBjEym6q5x/hstZ9Qde0WqPppwE533oa9XBpjHzUQdKCM2pJU9R+Mv0ECAwEAAaOCAfkw
ggH1MB8GA1UdIwQYMBaAFFbthhQJehPN3AlzwwPxnbfadisUMB0GA1UdDgQWBBRMV3+xMVAnnu9t
ziAwnkkwbrKxuzAMBgNVHRMBAf8EAjAAMB4GA1UdEQQXMBWBE2ludGVncmF0aW9uQGNhcmEuY2gw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDBDBgNVHSAEPDA6
MDgGCmCGSAGG/WwEAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRQ
cml2YXRlU1NMU0hBMjU2Q0EtRzIuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
RGlnaUNlcnRQcml2YXRlU1NMU0hBMjU2Q0EtRzIuY3JsMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRQcml2YXRlU1NMU0hBMjU2Q0EtRzIuY3J0MA0GCSqGSIb3
DQEBCwUAA4IBAQClSETTCocgDCdsUDAq9/HR25IGqrR7+mTuUpy0W57RD9WULgtXfmW3qLYGBRwc
ZPUEjxMC81sHfhksYLSJp8fTTb2Ojs+1uokYYqFc7Xk9+fW03CRkz/OKNUEZ/TG1GJvPuSNXgjit
yCOEXfd67SWVABptClXgUAifUJUwskn9isRrGZ4Ithk+w2Gq0tCTmJVhZkRwksgj4whF2ZE0T3r6
kio+xdl/WUlpw8u5PWI9+G4DDUJTaF+21SDj8MXl5uYj1DIMZkHAeXiA5S56UCAytu3oRFIzuTXD
IhYpdrpZWEQEAuV8wylwJYVwojetF+hbI0je54w6FjFC35Y6l2gd</ds:X509Certificate>
      </ds:X509Data>
    </ds:KeyInfo>
  </ds:Signature>
  <saml2:Subject>
    <saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">2.16.756.5.30.1.999.9.1.1.1</saml2:NameID>
    <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"/>
  </saml2:Subject>
  <saml2:Conditions NotBefore="2026-08-31T06:36:47.832Z" NotOnOrAfter="2026-08-31T06:46:47.832Z"/>
  <saml2:AuthnStatement AuthnInstant="2026-08-31T06:36:47.832Z" SessionNotOnOrAfter="2026-08-31T06:46:47.832Z">
    <saml2:AuthnContext>
      <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml2:AuthnContextClassRef>
    </saml2:AuthnContext>
  </saml2:AuthnStatement>
</saml2:Assertion>
How to use

There are two ways to more easily consume this SAML assertion.

  1. You can specify the header Accept: application/xml when requesting this page (GET /tcu/epr_int_emedo_egger) to receive the assertion XML directly, instead of an HTML page.
  2. You can specify the header ikit-inject-tcu-token: epr_int_emedo_egger in your requests to the IKIT, and it will automatically fetch and inject this SAML assertion before sending your request to its recipient.