Use this table as a quick reference to the essential standard and Selerix proprietary SAML XML elements used by SAML-based BenSelect enrollment integrations.  Actual requirements may differ depending on needs and use case.

Element	Attribute	Required	Type	Description
Response	IssueInstant	Yes	DateTime in UTC	Reflects when you created the SAML.  All IssueInstant attribute values anywhere in the SAML should be the same.
	ResponseID	Standard	String	GUID you define as part of the standard SAML response. Not used by BenSelect.
	URI	Yes	String	Should match the ID attribute of the ResponseID attribute.
DigestValue		Yes	String	Base64-encoded value of the 160-bit SHA-1 digest string.  See: https://www.w3.org/TR/xmldsig-core/#sec-DigestValue
SignatureValue		Yes	String	Base64-encoded actual value of the digital signature.  See: https://www.w3.org/TR/xmldsig-core/#sec-SignatureValue
X509Certificate		Yes	String	Base64-encoded public X.509 certificate used to verify the message signature.
Assertion	AssertionID	Standard	String	GUID you define as part of the standard SAML response. Not used by BenSelect.
	IssueInstant	Yes	DateTime in UTC	Marks the beginning period during which the assertion is valid.  It is typically the time you built the SAML XML.  All IssueInstant attribute values in the SAML should be the same.
	Issuer	Standard	String	A unique and distinct value that identifies you in SAML messages.
AuthenticationStatement	AuthenticationInstant	Yes	DateTime in UTC	Marks the beginning period during which the assertion is valid.  It is typically the time you built the SAML XML.  All IssueInstant attribute values in the SAML should be the same.
NameIdentifier		Standard	String	A unique and distinct value that represents the authenticated user. This is the Employee ID on the case.  Same as EmployeeIdent used by the Selerix data model.  The employee must already be defined on the case to be recognized by the system.
Attribute	BenefitSnapshot	Optional	String	Display the benefits in which the family is currently enrolled before enrollment begins.
	Enroller	Optional	String	Indicates that a third party is involved with the enrollment.
	EnrollerID	Optional	String	A string that uniquely identifies the Enroller.
	FirstPlan	Optional	String	Defines the first plan that BenSelect will show when enrollment begins.  Set the AttributeValue to the plan tag name defined on the case.
	GroupNumber	Optional	String	A string that uniquely identifies the enrollment group.
	HeaderAndFooter	Optional	String	Display the information typically displayed above and below the main enrollment body of the page.
	KeepAliveTimeout	Optional	String	Used in conjunction with KeepAliveUrl, this value specifies the interval in milliseconds to signal the "keep alive" site.
	KeepAliveUrl	Optional	String	If an optional KeepAliveUrl attribute is defined in the SAML, BenSelect will post a signal to this URL periodically to indicate the enrollment is still in progress and the session should remain active.
	PersonalInfo	Optional	String	Display the family's demographic information and allow the applicant to change information before enrollment begins.
	Review	Optional	String	Display a confirmation page after each plan enrollment.
	SAMLReturnUrl	Optional	String	Defines the URL to which BenSelect should redirect the user once the enrollment is complete.  BenSelect posts the enrollment data in the return SAML using a Selerix transmittal attribute to this URL.
	Sidebar	Optional	String	Display the enrollment status panel typically displayed on the right for each plan in the enrollment.
	TopMenu	Optional	String	Display the BenSelect main menu.
	Transmittal	Yes	String	Selerix transmittal XML converted to HTML Entities.
	Welcome	Optional	String	Display the introductory "Welcome to the enrollment" page.