addAssertion($assertion = new \LightSaml\Model\Assertion\Assertion()) ->setStatus(new \LightSaml\Model\Protocol\Status(new \LightSaml\Model\Protocol\StatusCode(\LightSaml\SamlConstants::STATUS_SUCCESS))) ->setID(\LightSaml\Helper::generateID()) ->setIssueInstant(new \DateTime()) ->setDestination('https://sp.com/acs') ->setIssuer(new \LightSaml\Model\Assertion\Issuer('https://idp.com')) ; $assertion ->setId(\LightSaml\Helper::generateID()) ->setIssueInstant(new \DateTime()) ->setIssuer(new \LightSaml\Model\Assertion\Issuer('https://idp.com')) ->setSubject( (new \LightSaml\Model\Assertion\Subject()) ->setNameID(new \LightSaml\Model\Assertion\NameID('email.domain.com', \LightSaml\SamlConstants::NAME_ID_FORMAT_EMAIL)) ->addSubjectConfirmation( (new \LightSaml\Model\Assertion\SubjectConfirmation()) ->setMethod(\LightSaml\SamlConstants::CONFIRMATION_METHOD_BEARER) ->setSubjectConfirmationData( (new \LightSaml\Model\Assertion\SubjectConfirmationData()) ->setInResponseTo('id_of_the_authn_request') ->setNotOnOrAfter(new \DateTime('+1 MINUTE')) ->setRecipient('https://sp.com/acs') ) ) ) ->setConditions( (new \LightSaml\Model\Assertion\Conditions()) ->setNotBefore(new \DateTime()) ->setNotOnOrAfter(new \DateTime('+1 MINUTE')) ->addItem( new \LightSaml\Model\Assertion\AudienceRestriction(['https://sp.com/acs']) ) ) ->addItem( (new \LightSaml\Model\Assertion\AttributeStatement()) ->addAttribute(new \LightSaml\Model\Assertion\Attribute(\LightSaml\ClaimTypes::EMAIL_ADDRESS, 'email@domain.com')) ->addAttribute(new \LightSaml\Model\Assertion\Attribute(\LightSaml\ClaimTypes::COMMON_NAME, 'x123')) ) ->addItem( (new \LightSaml\Model\Assertion\AuthnStatement()) ->setAuthnInstant(new \DateTime('-10 MINUTE')) ->setSessionIndex('_some_session_index') ->setAuthnContext( (new \LightSaml\Model\Assertion\AuthnContext()) ->setAuthnContextClassRef(\LightSaml\SamlConstants::AUTHN_CONTEXT_PASSWORD_PROTECTED_TRANSPORT) ) ) ; $expectedXmlOutput = << https://idp.com https://idp.com email.domain.com https://sp.com/acs email@domain.com x123 urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport EOT;