title: Azure AD SSO with SAML Token encryption
body: <p>I'm working on SAML-based SSO with Azure AD.<br/>
  I did all the required setup and able to make the SAMLRequest and able to get SAMLResponse on reply URL.<br/>(Token encryption Menu imported Certificate (Base64) to encrypt the token.)
  but the response is BASE64 encoded and encrypted.</p>
  <p>I refered to below link.
  <a href="https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-certificates-for-federated-single-sign-on" rel="nofollow noreferrer">Manage certificates for federated single sign-on in Azure Active Directory</a></p>
  <p>I decoded BASE64 then get xml Data.</p>
  <h2>sample xml data</h2>
  <pre><code>&lt;samlp:Response ID=&quot;_8b8b42b6..........................xmlns:samlp=&quot;urn:oasis:names:tc:SAML:2.0:protocol&quot;&gt;
      &lt;Issuer xmlns=&quot;urn:oasis:names:tc:SAML:2.0:assertion&quot;&gt;https://sts.windows.net/.........../&lt;/Issuer&gt;
      &lt;samlp:Status&gt;
          &lt;samlp:StatusCode Value=&quot;urn:oasis:names:tc:SAML:2.0:status:Success&quot; /&gt;
      &lt;/samlp:Status&gt;
      &lt;EncryptedAssertion xmlns=&quot;urn:oasis:names:tc:SAML:2.0:assertion&quot;&gt;
               ......
               ......
               ......
              &lt;/xenc:CipherData&gt;
          &lt;/xenc:EncryptedData&gt;
      &lt;/EncryptedAssertion&gt;
  &lt;/samlp:Response&gt;
  </code></pre>
  <hr />
  <p><strong>I want to decrypt attribute &quot;EncryptedAssertion&quot;.</strong></p>