The response redirects the client to the AAA login page, located at Once base64 decoded we can see the attributes contained in the assertion, just the .