33
<Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
                  Version="2.0"
                  IssueInstant="2005-01-31T12:00:00Z"
                  ID="abe567de6">
    <Issuer>
        http://www.AirlineInc.com
    </Issuer>
    <Subject>
        <NameID Format="urn:oasis:names:tc:1.1:nameid-format:emailAddress">
            j.doe@acompany.com
        </NameID>
    </Subject>
    <Conditions NotBefore="2005-01-31T12:00:00Z"
                         NotOnOrAfter="2005-01-31T13:00:00Z">
    </Conditions>
    <AuthnStatement AuthnInstant="2005-01-29T09:32:00Z">
        <AuthnContext>
            <AuthnContextClassRef>
                urn:oasis:names:tc:SAML2.0:ac:classes:PasswordProtectedTransport
            </AuthnContextClassRef>
            <AuthnContextDeclRef>
                http://www.AirlineInc.com/j_doe/ac.xml
            </AuthnContextDeclRef>
        </AuthnContext>
    </AuthnStatement>
</Assertion>
This is a reference to an XML document which contains all the authentication context information.