148
<ArtifactResponse xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
                               ID="fff011234"
                              InResponseTo="abe567de6"
                               Version="2.0"
                               IssueInstant="2005-01-31T12:00:00Z"
                               Destination="https://www.AirlineInc.com">
    <Status>
        <StatusCode Value="samlp:Success"/>
        <StatusMessage>Success</StatusMessage>
    </Status>
    <AuthnRequest xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
                              ForceAuthn="true"
                              ProviderName="CarRentalInc.com"
                              ID="abe567de6"
                              Version="2.0"
                              IssueInstant="2005-01-31T11:58:00Z"
                              Destination="https://www.AirlineInc.com">
        <Subject xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
            <NameID Format="urn:oasis:names:tc:1.1:nameid-format:emailAddress">
                j.doe@acompany.com
            </NameID>
        </Subject>
    </AuthnRequest>
</ArtifactResponse>
see example10.b
Note: the value of "InResponseTo" must match the value of "ID" in the <ArtifactResolve>
The AuthnRequest message
is embedded within an
ArtifactResponse