2019-02-18 09:01:00,433 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPPostDecoder:?] - Decoded SAML relay state of: a8039b80335b11e9ac94005056b16ec7 2019-02-18 09:01:00,433 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPPostDecoder:?] - Getting Base64 encoded message from request 2019-02-18 09:01:00,434 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPPostDecoder:?] - Decoded SAML message 2019-02-18 09:01:00,434 - DEBUG [PROTOCOL_MESSAGE:?] - https://www.norvax.net/medicare/sp-qa iEJyPI1Vs72eFZWPCtxjSW48pbk= aIxY3kl/EYWh42+aZKSdGtoTwUNxocXE00/CE69pTsr12NOOD2s2wUkGcUElKqAOW+4jg05JOl6PA5+q6PoRIrlKN3KE0OL7bri5aPbjZX5lMayu/MqTxIclpwZa3gbK+R14ERRYbr22krmQ41j7EUuVNna10giQ2gRy5AyVtIMv1mHeDIVUxBhYetr9YuTz9SOe4iAJyT/+4f0VWz5KrA+AfbN/1fZz9ZafTUJy/Dq3C6wjC6WNt2Y1rjrBOQg26gFOSALsgsYhtnadaxRkYDy52CUlo2dluDBKPWnAFxPM/UftKca355OxoZ68DOuwPv1slOEKXqz9c52HhrBK9A== MIIFRTCCBC2gAwIBAgIJAOPGZBF6hoY4MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYDVQQGEwJVUzEQ MA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5j b20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEz MDEGA1UEAxMqR28gRGFkZHkgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE2 MDcwNTE3MDE0MFoXDTE5MDcwNTE3MDE0MFowQTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFs aWRhdGVkMRwwGgYDVQQDExNzcC11YXQuZ29oZWFsdGguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAxf4nfhsYuPVn1cVznXpg2vtrzAj7f2uj9cmTMg5y1bZ/ucNOs1O3vhC/ltwJ zOKJnvEGNDDO22B+XuX5T8Q8BIllIKUQr4EQNCCs5IRwg/uJG2HKIP4ReVthI7dIH5U1mf1nWV35 lQ/gkivTgjTLsHwNAsDwdEIHWbAhUIVIAlTfTHq7MMS23eiHRIIsPuaNwnKGrnm/csPYktoPFKHS kt52/LhDlzZQ0SQTGNRFh+Bv4RHlvvqN2Jufn5GjcKRTsOBzDc9il2NSCFmXDWMupJSYklR6+5Ms ETPgtHpXHhBZbEi9lr7yzzhYAEShu+C+qQ1m6jZH2YWbl40keyhNFwIDAQABo4IByjCCAcYwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWg MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS0yNjIuY3Js MF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmlj YXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAU QMK9J47MNIMwojPX+2yz8LQsgM4wNwYDVR0RBDAwLoITc3AtdWF0LmdvaGVhbHRoLmNvbYIXd3d3 LnNwLXVhdC5nb2hlYWx0aC5jb20wHQYDVR0OBBYEFO0zhMNZCSBpVPtMWPxXtZ+vM0GoMA0GCSqG SIb3DQEBCwUAA4IBAQAyUVH5pY+vpTNOU0RBJIWP9a///mARnVvA5M/S7UohykZEI6IUT4ZnxYrL qVheXcCa0FhLokz6GbYg+CTk//v6aN1Usomyx4ppA5qYyCHzRTKuqWxhYboOW/Ycbs2GtG4mGu+1 UF48DziVY1CmybcanpVG1Zzj/KmBpNEMBvlyrISftYQPpXSt9wJTIaf+AuVdqum82dlIx9pJuPfm Y5hz1xANncoqo6rFSjN0dZLs3F4jupxqEFJaxpqIxjSDbEs/McZFXmIE6xPKOLLUyXeMpuE27Q8O QEnWht9rnYDSavSYNCSueLFkJNw8PFFIdP3yovA/jSh0ZZoUFMgX9A88 2019-02-18 09:01:00,440 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:?] - Metadata Resolver FilesystemMetadataResolver SAMLtest: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://www.norvax.net/medicare/sp-qa] 2019-02-18 09:01:00,440 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 source EntityDescriptors 2019-02-18 09:01:00,440 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering 2019-02-18 09:01:00,440 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Attempting to filter candidate RoleDescriptors via resolved Predicates 2019-02-18 09:01:00,440 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - After predicate filtering 1 RoleDescriptors remain 2019-02-18 09:01:00,440 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:?] - Message Handler: org.opensaml.saml.common.messaging.context.SAMLMetadataContext added to MessageContext as child of org.opensaml.saml.common.messaging.context.SAMLPeerEntityContext 2019-02-18 09:01:00,441 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: Selecting default AttributeConsumingService, if any 2019-02-18 09:01:00,441 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: No AttributeConsumingService selected 2019-02-18 09:01:00,441 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:?] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer https://www.norvax.net/medicare/sp-qa 2019-02-18 09:01:00,442 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:01:00,442 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Checking SAML message intended destination endpoint against receiver endpoint 2019-02-18 09:01:00,442 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Intended message destination endpoint: https://samltest.id/idp/profile/SAML2/POST/SSO 2019-02-18 09:01:00,442 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Actual message receiver endpoint: https://samltest.id/idp/profile/SAML2/POST/SSO 2019-02-18 09:01:00,442 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: SAML message intended destination endpoint matched recipient endpoint 2019-02-18 09:01:00,442 - DEBUG [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:?] - Message Handler: Evaluating message replay for message ID 'GHI-9272c58c93d1454e8ddec37cf382435c', issue instant '2019-02-18T09:00:59.426Z', entityID 'https://www.norvax.net/medicare/sp-qa' 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.security.impl.SAMLSignatureProfileValidator:?] - Saw Enveloped signature transform 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.security.impl.SAMLSignatureProfileValidator:?] - Saw Exclusive C14N signature transform 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: Attempting to verify signature on signed SAML protocol message type: {urn:oasis:names:tc:SAML:2.0:protocol}AuthnRequest 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolving credentials from metadata using entityID: https://www.norvax.net/medicare/sp-qa, role: {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor, protocol: urn:oasis:names:tc:SAML:2.0:protocol, usage: SIGNING 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Retrieving role descriptor metadata for entity 'https://www.norvax.net/medicare/sp-qa' in role '{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor' for protocol 'urn:oasis:names:tc:SAML:2.0:protocol' 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:?] - Metadata Resolver FilesystemMetadataResolver SAMLtest: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://www.norvax.net/medicare/sp-qa] 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 source EntityDescriptors 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Attempting to filter candidate RoleDescriptors via resolved Predicates 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - After predicate filtering 1 RoleDescriptors remain 2019-02-18 09:01:00,444 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolved cached credentials from KeyDescriptor object metadata 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.XMLSignature:?] - signatureMethodURI = http://www.w3.org/2001/04/xmldsig-more#rsa-sha256 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.XMLSignature:?] - jceSigAlgorithm = SHA256withRSA 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.XMLSignature:?] - jceSigProvider = SunRsaSign 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.XMLSignature:?] - PublicKey = Sun RSA public key, 2048 bits modulus: 24994274218894557472197770096839656616932529488956537105148329663726685368670351700008373187146767065041587273758980112146900840077613728974174375709159323391231112586536034090025372689326558322053520666017983735731137421741064154346680948141852302172353202582383238090933460790213772951262298075101057542280307247771110342515926830293175397588901888212852227228686276220756769435050586245630932190043178787796727961760029469408259347892771783849612410920369405337034479955758357098164650356919663870946762524315827289216114749884302889256444776501648046728386884972722671907773918793373849780481525276205849434934551 public exponent: 65537 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - iEJyPI1Vs72eFZWPCtxjSW48pbk= 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.Manifest:?] - verify 1 References 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.Manifest:?] - I am not requested to follow nested Manifests 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#GHI-9272c58c93d1454e8ddec37cf382435c" 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID GHI-9272c58c93d1454e8ddec37cf382435c and Element was [saml2p:AuthnRequest: null] 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#GHI-9272c58c93d1454e8ddec37cf382435c" 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID GHI-9272c58c93d1454e8ddec37cf382435c and Element was [saml2p:AuthnRequest: null] 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://www.norvax.net/medicare/sp-qa 2019-02-18 09:01:00,445 - DEBUG [org.apache.xml.security.signature.Reference:?] - Verification successful for URI "#GHI-9272c58c93d1454e8ddec37cf382435c" 2019-02-18 09:01:00,446 - DEBUG [org.apache.xml.security.signature.Manifest:?] - The Reference has Type 2019-02-18 09:01:00,446 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: Validation of protocol message signature succeeded, message type: {urn:oasis:names:tc:SAML:2.0:protocol}AuthnRequest 2019-02-18 09:01:00,446 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: Authentication via protocol message signature succeeded for context issuer entity ID https://www.norvax.net/medicare/sp-qa 2019-02-18 09:01:00,446 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler 2019-02-18 09:01:00,446 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Handler can not handle this request, skipping 2019-02-18 09:01:00,446 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler 2019-02-18 09:01:00,446 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: HTTP request was not signed via simple signature mechanism, skipping 2019-02-18 09:01:00,446 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:01:00,446 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:?] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Attempting to resolve endpoint of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService for outbound message 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest 2019-02-18 09:01:00,447 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:?] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 1 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location https://medicare.qa.norvax.net/api/2/spSso/response using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was resolved, won't be able to determine delegation requested status via metadata 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was available 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Delegation request was not explicitly indicated, using default value: NOT_REQUESTED 2019-02-18 09:01:00,447 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Issuance of a delegated Assertion is not in effect, skipping further processing 2019-02-18 09:01:00,447 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing enabled 2019-02-18 09:01:00,448 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing enabled 2019-02-18 09:01:00,448 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Encryption for assertions (true), identifiers (false), attributes(false) 2019-02-18 09:01:00,448 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolving EncryptionParameters for request 2019-02-18 09:01:00,448 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding entityID to resolution criteria 2019-02-18 09:01:00,448 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding role metadata to resolution criteria 2019-02-18 09:01:00,448 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolving credentials from supplied RoleDescriptor using usage: ENCRYPTION. Effective entityID was: https://www.norvax.net/medicare/sp-qa 2019-02-18 09:01:00,448 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolved cached credentials from KeyDescriptor object metadata 2019-02-18 09:01:00,448 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve data encryption algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:01:00,448 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve key transport algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:01:00,448 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolved EncryptionParameters 2019-02-18 09:01:00,459 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:?] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing 2019-02-18 09:01:00,461 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeAuthenticationContext:?] - Profile Action InitializeAuthenticationContext: Created authentication context: AuthenticationContext{initiationInstant=2019-02-18T09:01:00.461Z, isPassive=false, forceAuthn=false, hintedName=null, maxAge=0, potentialFlows=[], activeResults=[], attemptedFlow=null, signaledFlowId=null, authenticationStateMap={}, resultCacheable=true, initialAuthenticationResult=null, authenticationResult=null, completionInstant=1970-01-01T00:00:00.000Z} 2019-02-18 09:01:00,461 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.ProcessRequestedAuthnContext:?] - Profile Action ProcessRequestedAuthnContext: AuthnRequest did not contain a RequestedAuthnContext, nothing to do 2019-02-18 09:01:00,462 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:?] - Profile Action PopulateAuthenticationContext: Installed 1 potential authentication flows into AuthenticationContext 2019-02-18 09:01:00,462 - DEBUG [net.shibboleth.idp.session.impl.PopulateSessionContext:?] - Profile Action PopulateSessionContext: No session found for client 2019-02-18 09:01:00,462 - DEBUG [net.shibboleth.idp.authn.impl.InitializeRequestedPrincipalContext:?] - Profile Action InitializeRequestedPrincipalContext: Profile configuration did not supply any default authentication methods 2019-02-18 09:01:00,462 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:?] - Profile Action FilterFlowsByForcedAuthn: Request does not have forced authentication requirement, nothing to do 2019-02-18 09:01:00,462 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:01:00,463 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: No specific Principals requested 2019-02-18 09:01:00,463 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: No usable active results available, selecting an inactive flow 2019-02-18 09:01:00,463 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/Password 2019-02-18 09:01:00,463 - DEBUG [net.shibboleth.idp.authn.impl.ExtractUsernamePasswordFromBasicAuth:?] - Profile Action ExtractUsernamePasswordFromBasicAuth: No appropriate Authorization header found 2019-02-18 09:01:00,660 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Found matching scheme, returning name of 'www.norvax.net' 2019-02-18 09:01:00,660 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:01:00,660 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No description matching the languages found, returning null 2019-02-18 09:01:08,693 - DEBUG [net.shibboleth.idp.authn.AbstractExtractionAction:?] - Profile Action ExtractUsernamePasswordFromFormRequest: Trimming whitespace of input string 'rick' 2019-02-18 09:01:08,693 - DEBUG [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Attempting to authenticate user rick 2019-02-18 09:01:08,693 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolve user=[org.ldaptive.auth.User@353901917::identifier=rick, context=org.apache.velocity.VelocityContext@6d21c151] 2019-02-18 09:01:08,696 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolved dn=uid=rick,ou=People,dc=samltest,dc=id for user=[org.ldaptive.auth.User@353901917::identifier=rick, context=org.apache.velocity.VelocityContext@6d21c151] 2019-02-18 09:01:08,699 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'rick' succeeded 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.AbstractValidationAction:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Adding custom Principal(s) defined on underlying flow descriptor 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.impl.PopulateSubjectCanonicalizationContext:?] - Profile Action PopulateSubjectCanonicalizationContext: Installing 2 canonicalization flows into SubjectCanonicalizationContext 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/x500 for applicability... 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Canonicalization flow c14n/x500 was not applicable to this request 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/simple for applicability... 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Selecting canonicalization flow c14n/simple 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:?] - Profile Action SimpleSubjectCanonicalization: trimming whitespace of input string 'rick' 2019-02-18 09:01:08,699 - DEBUG [net.shibboleth.idp.session.impl.DetectIdentitySwitch:?] - Profile Action DetectIdentitySwitch: No previous session found, nothing to do 2019-02-18 09:01:08,700 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Canonical principal name was established as 'rick' 2019-02-18 09:01:08,700 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Request did not have explicit authentication requirements, result is accepted 2019-02-18 09:01:08,700 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:?] - Profile Action UpdateSessionWithAuthenticationResult: Creating new session for principal rick 2019-02-18 09:01:08,700 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Created new session 00cab333bd20c5d6ab1a5f79cab49f021d8ebb8f10eed3eb9dc8539a2d4ac9d5 for principal rick 2019-02-18 09:01:08,700 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving AuthenticationResult for flow authn/Password in session 00cab333bd20c5d6ab1a5f79cab49f021d8ebb8f10eed3eb9dc8539a2d4ac9d5 2019-02-18 09:01:08,701 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:?] - Template text (uid=$resolutionContext.principal) yields (uid=rick) 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter' Beginning process of filtering the following 7 attributes: [uid, telephoneNumber, Identifier, mail, surname, displayName, givenName] 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'uid' remained after filtering 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': no policy permitted release of attribute telephoneNumber values 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'Identifier' remained after filtering 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'mail' remained after filtering 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'surname' remained after filtering 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'displayName' remained after filtering 2019-02-18 09:01:08,703 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering 2019-02-18 09:01:08,704 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:01:08,704 - DEBUG [net.shibboleth.idp.consent.flow.impl.InitializeConsentContext:?] - Profile Action InitializeConsentContext: Created consent context 'ConsentContext{previousConsents={}, chosenConsents={}}' 2019-02-18 09:01:08,704 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action PopulateAttributeReleaseContext: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@445bbb82' 2019-02-18 09:01:08,704 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.PopulateAttributeReleaseContext:?] - Profile Action PopulateAttributeReleaseContext: Consentable attributes '{Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}}' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:https://www.norvax.net/medicare/sp-qa' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:https://www.norvax.net/medicare/sp-qa' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'rick:https://www.norvax.net/medicare/sp-qa' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick' 2019-02-18 09:01:08,705 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'rick' 2019-02-18 09:01:08,706 - DEBUG [net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:?] - Profile Action PopulateConsentContext: Populating consents: [Identifier, displayName, givenName, mail, surname, uid] 2019-02-18 09:01:08,706 - DEBUG [net.shibboleth.idp.consent.logic.impl.IsConsentRequiredPredicate:?] - Consent is required, no previous consents 2019-02-18 09:01:08,900 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Found matching scheme, returning name of 'www.norvax.net' 2019-02-18 09:01:08,900 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No description matching the languages found, returning null 2019-02-18 09:01:08,900 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or InformationURLs returning null 2019-02-18 09:01:08,900 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or PrivacyStatementURLs returning null 2019-02-18 09:01:08,900 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:01:08,900 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No Organization, OrganizationName or names, returning null 2019-02-18 09:01:10,770 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Extracted consent ids '[Identifier, displayName, givenName, mail, surname, uid]' from request parameter '_shib_idp_consentIds' 2019-02-18 09:01:10,770 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Consent context 'ConsentContext{previousConsents={}, chosenConsents={Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}}' 2019-02-18 09:01:10,771 - INFO [Shibboleth-Consent-Audit.SSO:?] - 20190218T090110Z|https://www.norvax.net/medicare/sp-qa|AttributeReleaseConsent|rick|Identifier,displayName,givenName,mail,surname,uid||true,true,true,true,true,true 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:https://www.norvax.net/medicare/sp-qa' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:_key_idx' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.storage.impl.ConsentSerializer:?] - Serialized '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' as '[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}]' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.CreateResult:?] - Profile Action CreateResult: Created consent result 'ConsentResult{id=null, context=intercept/attribute-release, key=rick:https://www.norvax.net/medicare/sp-qa, value=[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}], expiration=1582016470771}' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:_key_idx' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Will not prune storage records, number of keys '0' is less than max number of records '10' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:_key_idx' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Creating storage index with key 'rick:https://www.norvax.net/medicare/sp-qa' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.storage.impl.CollectionSerializer:?] - Serialized '[rick:https://www.norvax.net/medicare/sp-qa]' as '["rick:https://www.norvax.net/medicare/sp-qa"]' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action ReleaseAttributes: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@445bbb82' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Consents '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attributes before release '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}}' 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}' will be released because consent is approved 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}' will be released because consent is approved 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}' will be released because consent is approved 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}' will be released because consent is approved 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}' will be released because consent is approved 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}' will be released because consent is approved 2019-02-18 09:01:10,771 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Releasing attributes '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}}' 2019-02-18 09:01:10,772 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Not releasing attributes '{}' 2019-02-18 09:01:10,772 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:01:10,772 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractResponseShellAction:?] - Profile Action AddStatusResponseShell: Setting Issuer to https://samltest.id/saml/idp 2019-02-18 09:01:10,778 - DEBUG [org.opensaml.saml.common.profile.impl.AddInResponseToToResponse:?] - Profile Action AddInResponseToToResponse: Attempting to add InResponseTo to outgoing Response 2019-02-18 09:01:10,781 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAuthenticationStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Attempting to add an AuthenticationStatement to outgoing Assertion 2019-02-18 09:01:10,781 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Created Assertion _653270a089b147e216baa3c9b54d5cfb 2019-02-18 09:01:10,781 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Added Assertion _653270a089b147e216baa3c9b54d5cfb to Response _15a74db04f48af9915d1c1a60a55698a 2019-02-18 09:01:10,781 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAuthnStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Added AuthenticationStatement to Assertion _653270a089b147e216baa3c9b54d5cfb 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:?] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rick of attribute uid 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rsanchez@samltest.id of attribute Identifier 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rsanchez@samltest.id of attribute mail 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sanchez of attribute surname 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Rick Sanchez of attribute displayName 2019-02-18 09:01:10,782 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Rick of attribute givenName 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion Subjects 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] - No object to operate on, returning true 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:?] - Metadata specifies the following formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:transient] 2019-02-18 09:01:10,784 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - Configuration specifies the following formats: [] 2019-02-18 09:01:10,784 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - Configuration did not specify any formats, relying on metadata alone 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Candidate NameID formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:transient] 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Trying to generate identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:?] - Generating NameID AAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco= with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Successfully generated identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Successfully generated NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Added NameID to 1 assertion subject(s) 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Attempting to add SubjectConfirmation to assertions in outgoing Response 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Address to 172.31.33.243 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data InResponseTo to GHI-9272c58c93d1454e8ddec37cf382435c 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Recipient to https://medicare.qa.norvax.net/api/2/spSso/response 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data NotOnOrAfter to 5 minutes from now 2019-02-18 09:01:10,784 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Added SubjectConfirmation with method urn:oasis:names:tc:SAML:2.0:cm:bearer to 1 assertion(s) 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Attempting to add NotBefore condition to every Assertion in outgoing Response 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Added NotBefore condition to Assertion _653270a089b147e216baa3c9b54d5cfb 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotBeforeConditionToAssertions: Assertion _653270a089b147e216baa3c9b54d5cfb did not already contain Conditions, one was added 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Attempting to add NotOnOrAfter condition to every Assertion in outgoing Response 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Added NotOnOrAfter condition, indicating an expiration of 2019-02-18T09:06:10.772Z, to Assertion _653270a089b147e216baa3c9b54d5cfb 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Assertion _653270a089b147e216baa3c9b54d5cfb already contained Conditions, nothing was done 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Attempting to add an AudienceRestrictionCondition to every Assertion in Response 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAudienceRestrictionToAssertions: Assertion _653270a089b147e216baa3c9b54d5cfb already contained Conditions, nothing was done 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding new AudienceRestriction 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding https://www.norvax.net/medicare/sp-qa as an Audience of the AudienceRestriction 2019-02-18 09:01:10,785 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Added AudienceRestrictionCondition to Assertion _653270a089b147e216baa3c9b54d5cfb 2019-02-18 09:01:10,787 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:?] - Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party https://www.norvax.net/medicare/sp-qa to existing session 00cab333bd20c5d6ab1a5f79cab49f021d8ebb8f10eed3eb9dc8539a2d4ac9d5 2019-02-18 09:01:10,787 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving SPSession for service https://www.norvax.net/medicare/sp-qa in session 00cab333bd20c5d6ab1a5f79cab49f021d8ebb8f10eed3eb9dc8539a2d4ac9d5 2019-02-18 09:01:10,787 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:?] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession' 2019-02-18 09:01:10,787 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Maintaining secondary index for service ID https://www.norvax.net/medicare/sp-qa and key AAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco= 2019-02-18 09:01:10,788 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptNameIDs: No encryption parameters, nothing to do 2019-02-18 09:01:10,788 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptAttributes: No encryption parameters, nothing to do 2019-02-18 09:01:10,789 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_653270a089b147e216baa3c9b54d5cfb" 2019-02-18 09:01:10,789 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _653270a089b147e216baa3c9b54d5cfb and Element was [saml2:Assertion: null] 2019-02-18 09:01:10,789 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_653270a089b147e216baa3c9b54d5cfb" 2019-02-18 09:01:10,789 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _653270a089b147e216baa3c9b54d5cfb and Element was [saml2:Assertion: null] 2019-02-18 09:01:10,789 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:01:10,789 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://samltest.id/saml/idpAAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco=https://www.norvax.net/medicare/sp-qaurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransportrickrsanchez@samltest.idrsanchez@samltest.idSanchezRick SanchezRick 2019-02-18 09:01:10,790 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:01:10,790 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - h1KGFyKLlNLs8IwJ7qp1a6l7WBe7JuJBYs1AjyNcwFw= 2019-02-18 09:01:10,792 - DEBUG [PROTOCOL_MESSAGE:?] - Profile Action EncryptAssertions: Response before assertion encryption: https://samltest.id/saml/idp https://samltest.id/saml/idp h1KGFyKLlNLs8IwJ7qp1a6l7WBe7JuJBYs1AjyNcwFw= pjKXGy5McqqVx23q3K7+n6j+4ETdILADszZGOI0BFNYfBnMty0D2nMt6b1nRdtV7AiNecFc9YtacoJF/OhXN9Usht6hB1egbQ2gy4ZZtk1JJgQd/gPjl4OWzcYyh9eD/R1Kuze2fr0Ophp52rORf0P3grIhYycXuIMASUbd9D0KF0wqn+MFek+0KVMp8zikDNIWw0cXXEAXQ5CTL4VvATTqlnjJ+DznH2aOCBfU4COk3QSkAhiM/w5l5/b/6mWI23yoht3FdwMzMHOY9c3TnanjZmkDMrgyGNpW7iy7MkOSdA2pKUSRqAYu/EnYMpSXyNoL2roYX7gIm/qShGLICDA== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== AAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco= https://www.norvax.net/medicare/sp-qa urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport rick rsanchez@samltest.id rsanchez@samltest.id Sanchez Rick Sanchez Rick 2019-02-18 09:01:10,793 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Assertion before encryption: https://samltest.id/saml/idp h1KGFyKLlNLs8IwJ7qp1a6l7WBe7JuJBYs1AjyNcwFw= pjKXGy5McqqVx23q3K7+n6j+4ETdILADszZGOI0BFNYfBnMty0D2nMt6b1nRdtV7AiNecFc9YtacoJF/OhXN9Usht6hB1egbQ2gy4ZZtk1JJgQd/gPjl4OWzcYyh9eD/R1Kuze2fr0Ophp52rORf0P3grIhYycXuIMASUbd9D0KF0wqn+MFek+0KVMp8zikDNIWw0cXXEAXQ5CTL4VvATTqlnjJ+DznH2aOCBfU4COk3QSkAhiM/w5l5/b/6mWI23yoht3FdwMzMHOY9c3TnanjZmkDMrgyGNpW7iy7MkOSdA2pKUSRqAYu/EnYMpSXyNoL2roYX7gIm/qShGLICDA== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== AAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco= https://www.norvax.net/medicare/sp-qa urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport rick rsanchez@samltest.id rsanchez@samltest.id Sanchez Rick Sanchez Rick 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = AES/CBC/ISO10126Padding 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = ENCRYPT_MODE 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting element... 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Serialized octets: https://samltest.id/saml/idph1KGFyKLlNLs8IwJ7qp1a6l7WBe7JuJBYs1AjyNcwFw=pjKXGy5McqqVx23q3K7+n6j+4ETdILADszZGOI0BFNYfBnMty0D2nMt6b1nRdtV7AiNecFc9YtacoJF/OhXN9Usht6hB1egbQ2gy4ZZtk1JJgQd/gPjl4OWzcYyh9eD/R1Kuze2fr0Ophp52rORf0P3grIhYycXuIMASUbd9D0KF0wqn+MFek+0KVMp8zikDNIWw0cXXEAXQ5CTL4VvATTqlnjJ+DznH2aOCBfU4COk3QSkAhiM/w5l5/b/6mWI23yoht3FdwMzMHOY9c3TnanjZmkDMrgyGNpW7iy7MkOSdA2pKUSRqAYu/EnYMpSXyNoL2roYX7gIm/qShGLICDA==MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA==AAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco=https://www.norvax.net/medicare/sp-qaurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransportrickrsanchez@samltest.idrsanchez@samltest.idSanchezRick SanchezRick 2019-02-18 09:01:10,793 - DEBUG [org.apache.xml.security.encryption.XMLCipherUtil:?] - Saw non-AES-GCM mode block cipher, returning IvParameterSpec: http://www.w3.org/2001/04/xmlenc#aes128-cbc 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Expected cipher.outputSize = 5456 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Actual cipher.outputSize = 5456 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets: 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 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets length = 7296 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation and c14n algorithm 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = RSA/ECB/OAEPPadding 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = WRAP_MODE 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting key ... 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets: Hr/VYjxxjzsRrj4ESkFnhmqxtsrlI4Vosi5Te4vDZUmEry4UlCQqOX2AyQl1SayOuk8YQ4U6wbQHv6RXBzblGQtr9MeoGBJ/Ae9aeUtSmmY9gh9E1+g9/AZfxKvQ1ip/AGyQdFpx06AXRejHnF7Dyt7r/J0rjSY74CmLMcktFWUw4B66Bs29LG4Q1bko8SFuUKmUPjcs8K+vkU1zmTgNGAUn/p//ehPDrCWkh4A+B5v9zuzhZOMYYnfZXmD7pRd0fEubeTZ9JScvdbsBMUdCwQXWDOU2+nfpx8sqxW9lZIE82IkeYs1E7hycY7lsjHtP+qtgGBGyYBI3rjK5VqSK3A== 2019-02-18 09:01:10,794 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets length = 344 2019-02-18 09:01:10,795 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Placing EncryptedKey elements inline inside EncryptedData 2019-02-18 09:01:10,797 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler:?] - Adding destination to outbound SAML 2 protocol message: https://medicare.qa.norvax.net/api/2/spSso/response 2019-02-18 09:01:10,797 - DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler:?] - Message Handler: Checking outbound endpoint for allowed URL scheme: https://medicare.qa.norvax.net/api/2/spSso/response 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_15a74db04f48af9915d1c1a60a55698a" 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _15a74db04f48af9915d1c1a60a55698a and Element was [saml2p:Response: null] 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_15a74db04f48af9915d1c1a60a55698a" 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _15a74db04f48af9915d1c1a60a55698a and Element was [saml2p:Response: null] 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://samltest.id/saml/idpMIIFRTCCBC2gAwIBAgIJAOPGZBF6hoY4MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYDVQQGEwJVUzEQ MA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5j b20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEz MDEGA1UEAxMqR28gRGFkZHkgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE2 MDcwNTE3MDE0MFoXDTE5MDcwNTE3MDE0MFowQTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFs aWRhdGVkMRwwGgYDVQQDExNzcC11YXQuZ29oZWFsdGguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAxf4nfhsYuPVn1cVznXpg2vtrzAj7f2uj9cmTMg5y1bZ/ucNOs1O3vhC/ltwJ zOKJnvEGNDDO22B+XuX5T8Q8BIllIKUQr4EQNCCs5IRwg/uJG2HKIP4ReVthI7dIH5U1mf1nWV35 lQ/gkivTgjTLsHwNAsDwdEIHWbAhUIVIAlTfTHq7MMS23eiHRIIsPuaNwnKGrnm/csPYktoPFKHS kt52/LhDlzZQ0SQTGNRFh+Bv4RHlvvqN2Jufn5GjcKRTsOBzDc9il2NSCFmXDWMupJSYklR6+5Ms ETPgtHpXHhBZbEi9lr7yzzhYAEShu+C+qQ1m6jZH2YWbl40keyhNFwIDAQABo4IByjCCAcYwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWg MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS0yNjIuY3Js MF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmlj YXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAU QMK9J47MNIMwojPX+2yz8LQsgM4wNwYDVR0RBDAwLoITc3AtdWF0LmdvaGVhbHRoLmNvbYIXd3d3 LnNwLXVhdC5nb2hlYWx0aC5jb20wHQYDVR0OBBYEFO0zhMNZCSBpVPtMWPxXtZ+vM0GoMA0GCSqG SIb3DQEBCwUAA4IBAQAyUVH5pY+vpTNOU0RBJIWP9a///mARnVvA5M/S7UohykZEI6IUT4ZnxYrL qVheXcCa0FhLokz6GbYg+CTk//v6aN1Usomyx4ppA5qYyCHzRTKuqWxhYboOW/Ycbs2GtG4mGu+1 UF48DziVY1CmybcanpVG1Zzj/KmBpNEMBvlyrISftYQPpXSt9wJTIaf+AuVdqum82dlIx9pJuPfm Y5hz1xANncoqo6rFSjN0dZLs3F4jupxqEFJaxpqIxjSDbEs/McZFXmIE6xPKOLLUyXeMpuE27Q8O QEnWht9rnYDSavSYNCSueLFkJNw8PFFIdP3yovA/jSh0ZZoUFMgX9A88Hr/VYjxxjzsRrj4ESkFnhmqxtsrlI4Vosi5Te4vDZUmEry4UlCQqOX2AyQl1SayOuk8YQ4U6wbQHv6RXBzblGQtr9MeoGBJ/Ae9aeUtSmmY9gh9E1+g9/AZfxKvQ1ip/AGyQdFpx06AXRejHnF7Dyt7r/J0rjSY74CmLMcktFWUw4B66Bs29LG4Q1bko8SFuUKmUPjcs8K+vkU1zmTgNGAUn/p//ehPDrCWkh4A+B5v9zuzhZOMYYnfZXmD7pRd0fEubeTZ9JScvdbsBMUdCwQXWDOU2+nfpx8sqxW9lZIE82IkeYs1E7hycY7lsjHtP+qtgGBGyYBI3rjK5VqSK3A==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 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:01:10,798 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - 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 2019-02-18 09:01:10,799 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:01:10,799 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Zfk/c3NbAE6WJeq2aLzyxtD5ULYhhmEZbPHZ45x7d58= 2019-02-18 09:01:10,802 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:?] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:01:10,802 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Invoking Velocity template to create POST body 2019-02-18 09:01:10,802 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Encoding action url of 'https://medicare.qa.norvax.net/api/2/spSso/response' with encoded value 'https://medicare.qa.norvax.net/api/2/spSso/response' 2019-02-18 09:01:10,802 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Marshalling and Base64 encoding SAML message 2019-02-18 09:01:10,802 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Setting RelayState parameter to: 'a8039b80335b11e9ac94005056b16ec7', encoded as 'a8039b80335b11e9ac94005056b16ec7' 2019-02-18 09:01:10,806 - DEBUG [PROTOCOL_MESSAGE:?] - https://samltest.id/saml/idp Zfk/c3NbAE6WJeq2aLzyxtD5ULYhhmEZbPHZ45x7d58= fX0PIoVkWGQbJutJ+Ha1oaHN+x5FPgiYHuRXw9QZE0L3xb9imnGFhO4laqQInxlQfDNxin91U79B/9n8/kDh9k4cziZs8ei170kAw6F3l1kSJgGXdqyXdnsSx9j+n7AkVxN9nLvzpeOvwjzAxqBrHwsMHvcSbMYdqy9eQfvwurRQXPWUTDLXpCUbz7mHjHfo1uyj6Pl4txutQUJLSIxiinr98HeR34rxDsKNfNA/OUQf/iuFriE/8tmhApZkQR4aDudY2ucLH/FMxqaHx9WQPgcB1z2sByhgW4DhzPk3AuQzD9/vhY95Y1RWtXWVulCiiLAv2MxcwWx/MWxnRVp+2Q== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== MIIFRTCCBC2gAwIBAgIJAOPGZBF6hoY4MA0GCSqGSIb3DQEBCwUAMIG0MQswCQYDVQQGEwJVUzEQ MA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5j b20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEz MDEGA1UEAxMqR28gRGFkZHkgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE2 MDcwNTE3MDE0MFoXDTE5MDcwNTE3MDE0MFowQTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFs aWRhdGVkMRwwGgYDVQQDExNzcC11YXQuZ29oZWFsdGguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAxf4nfhsYuPVn1cVznXpg2vtrzAj7f2uj9cmTMg5y1bZ/ucNOs1O3vhC/ltwJ zOKJnvEGNDDO22B+XuX5T8Q8BIllIKUQr4EQNCCs5IRwg/uJG2HKIP4ReVthI7dIH5U1mf1nWV35 lQ/gkivTgjTLsHwNAsDwdEIHWbAhUIVIAlTfTHq7MMS23eiHRIIsPuaNwnKGrnm/csPYktoPFKHS kt52/LhDlzZQ0SQTGNRFh+Bv4RHlvvqN2Jufn5GjcKRTsOBzDc9il2NSCFmXDWMupJSYklR6+5Ms ETPgtHpXHhBZbEi9lr7yzzhYAEShu+C+qQ1m6jZH2YWbl40keyhNFwIDAQABo4IByjCCAcYwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWg MDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS0yNjIuY3Js MF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmlj YXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAU QMK9J47MNIMwojPX+2yz8LQsgM4wNwYDVR0RBDAwLoITc3AtdWF0LmdvaGVhbHRoLmNvbYIXd3d3 LnNwLXVhdC5nb2hlYWx0aC5jb20wHQYDVR0OBBYEFO0zhMNZCSBpVPtMWPxXtZ+vM0GoMA0GCSqG SIb3DQEBCwUAA4IBAQAyUVH5pY+vpTNOU0RBJIWP9a///mARnVvA5M/S7UohykZEI6IUT4ZnxYrL qVheXcCa0FhLokz6GbYg+CTk//v6aN1Usomyx4ppA5qYyCHzRTKuqWxhYboOW/Ycbs2GtG4mGu+1 UF48DziVY1CmybcanpVG1Zzj/KmBpNEMBvlyrISftYQPpXSt9wJTIaf+AuVdqum82dlIx9pJuPfm Y5hz1xANncoqo6rFSjN0dZLs3F4jupxqEFJaxpqIxjSDbEs/McZFXmIE6xPKOLLUyXeMpuE27Q8O QEnWht9rnYDSavSYNCSueLFkJNw8PFFIdP3yovA/jSh0ZZoUFMgX9A88 Hr/VYjxxjzsRrj4ESkFnhmqxtsrlI4Vosi5Te4vDZUmEry4UlCQqOX2AyQl1SayOuk8YQ4U6wbQHv6RXBzblGQtr9MeoGBJ/Ae9aeUtSmmY9gh9E1+g9/AZfxKvQ1ip/AGyQdFpx06AXRejHnF7Dyt7r/J0rjSY74CmLMcktFWUw4B66Bs29LG4Q1bko8SFuUKmUPjcs8K+vkU1zmTgNGAUn/p//ehPDrCWkh4A+B5v9zuzhZOMYYnfZXmD7pRd0fEubeTZ9JScvdbsBMUdCwQXWDOU2+nfpx8sqxW9lZIE82IkeYs1E7hycY7lsjHtP+qtgGBGyYBI3rjK5VqSK3A== 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 2019-02-18 09:01:10,806 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:?] - Profile Action RecordResponseComplete: Record response complete 2019-02-18 09:01:10,806 - INFO [Shibboleth-Audit.SSO:?] - 20190218T090110Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|GHI-9272c58c93d1454e8ddec37cf382435c|https://www.norvax.net/medicare/sp-qa|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://samltest.id/saml/idp|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_15a74db04f48af9915d1c1a60a55698a|rick|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,Identifier,mail,surname,displayName,givenName|AAdzZWNyZXQxLbprfz8DhbiYG4EwS+2X8kBIphCassupYZhZBmhkSj7eX8PN9ve9fKCGR+tG4wrQCgOytlhl5RL9Sc8ve+3vUlmMcWNnhALkdXQ6miU/UfptCKObGH8JpOgaeeAG1d+Nls7KZmiqpco=|_653270a089b147e216baa3c9b54d5cfb| 2019-02-18 09:06:04,255 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded RelayState: http://127.0.0.1:5000/ 2019-02-18 09:06:04,255 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Base64 decoding and inflating SAML message 2019-02-18 09:06:04,256 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded SAML message 2019-02-18 09:06:04,256 - DEBUG [PROTOCOL_MESSAGE:?] - eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:?] - Metadata Resolver FilesystemMetadataResolver SAMLtest: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=eplapps-dev] 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 source EntityDescriptors 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Attempting to filter candidate RoleDescriptors via resolved Predicates 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - After predicate filtering 1 RoleDescriptors remain 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:?] - Message Handler: org.opensaml.saml.common.messaging.context.SAMLMetadataContext added to MessageContext as child of org.opensaml.saml.common.messaging.context.SAMLPeerEntityContext 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: Selecting default AttributeConsumingService, if any 2019-02-18 09:06:04,262 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: No AttributeConsumingService selected 2019-02-18 09:06:04,262 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:?] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer eplapps-dev 2019-02-18 09:06:04,263 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:04,264 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Checking SAML message intended destination endpoint against receiver endpoint 2019-02-18 09:06:04,264 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Intended message destination endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:06:04,264 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Actual message receiver endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:06:04,264 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: SAML message intended destination endpoint matched recipient endpoint 2019-02-18 09:06:04,264 - DEBUG [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:?] - Message Handler: Evaluating message replay for message ID 'ONELOGIN_d7a4bc15516c5b227548c26a8c74218801321f3c', issue instant '2019-02-18T09:06:03.000Z', entityID 'eplapps-dev' 2019-02-18 09:06:04,264 - DEBUG [org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler:?] - SPSSODescriptor for entity ID 'eplapps-dev' does not require AuthnRequests to be signed 2019-02-18 09:06:04,265 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: SAML protocol message was not signed, skipping XML signature processing 2019-02-18 09:06:04,265 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler 2019-02-18 09:06:04,265 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: HTTP request was not signed via simple signature mechanism, skipping 2019-02-18 09:06:04,265 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler 2019-02-18 09:06:04,265 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Handler can not handle this request, skipping 2019-02-18 09:06:04,265 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:04,265 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:?] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Attempting to resolve endpoint of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService for outbound message 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest 2019-02-18 09:06:04,266 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:?] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 1 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location http://127.0.0.1:5000/auth/callback using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was resolved, won't be able to determine delegation requested status via metadata 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was available 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Delegation request was not explicitly indicated, using default value: NOT_REQUESTED 2019-02-18 09:06:04,266 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Issuance of a delegated Assertion is not in effect, skipping further processing 2019-02-18 09:06:04,266 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing enabled 2019-02-18 09:06:04,267 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing not enabled 2019-02-18 09:06:04,267 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Encryption for assertions (true), identifiers (false), attributes(false) 2019-02-18 09:06:04,267 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolving EncryptionParameters for request 2019-02-18 09:06:04,267 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding entityID to resolution criteria 2019-02-18 09:06:04,267 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding role metadata to resolution criteria 2019-02-18 09:06:04,267 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolving credentials from supplied RoleDescriptor using usage: ENCRYPTION. Effective entityID was: eplapps-dev 2019-02-18 09:06:04,267 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Found no cached credentials in KeyDescriptor object metadata, resolving from KeyInfo 2019-02-18 09:06:04,267 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve data encryption algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:06:04,267 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve key transport algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:06:04,268 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolved EncryptionParameters 2019-02-18 09:06:04,272 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:?] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing 2019-02-18 09:06:04,274 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeAuthenticationContext:?] - Profile Action InitializeAuthenticationContext: Created authentication context: AuthenticationContext{initiationInstant=2019-02-18T09:06:04.274Z, isPassive=false, forceAuthn=false, hintedName=null, maxAge=0, potentialFlows=[], activeResults=[], attemptedFlow=null, signaledFlowId=null, authenticationStateMap={}, resultCacheable=true, initialAuthenticationResult=null, authenticationResult=null, completionInstant=1970-01-01T00:00:00.000Z} 2019-02-18 09:06:04,274 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.ProcessRequestedAuthnContext:?] - Profile Action ProcessRequestedAuthnContext: RequestedPrincipalContext created with operator exact and 1 custom principal(s) 2019-02-18 09:06:04,274 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:?] - Profile Action PopulateAuthenticationContext: Installed 1 potential authentication flows into AuthenticationContext 2019-02-18 09:06:04,274 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Performing primary lookup on session ID ca9d19e72ca5f6472661adbbb64f9788d86099167541d1bdad64c4992a2db507 2019-02-18 09:06:04,275 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Updating expiration of master record for session ca9d19e72ca5f6472661adbbb64f9788d86099167541d1bdad64c4992a2db507 to 2019-02-18T10:06:04.275Z 2019-02-18 09:06:04,276 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Loading AuthenticationResult for flow authn/Password in session ca9d19e72ca5f6472661adbbb64f9788d86099167541d1bdad64c4992a2db507 2019-02-18 09:06:04,276 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - No AuthenticationResult for flow authn/Password in session ca9d19e72ca5f6472661adbbb64f9788d86099167541d1bdad64c4992a2db507 2019-02-18 09:06:04,276 - DEBUG [net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults:?] - Profile Action ExtractActiveAuthenticationResults: No active authentication results, SSO will not be possible 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.InitializeRequestedPrincipalContext:?] - Profile Action InitializeRequestedPrincipalContext: Leaving existing RequestedPrincipalContext in place 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:?] - Profile Action FilterFlowsByForcedAuthn: Request does not have forced authentication requirement, nothing to do 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Specific principals requested with 'exact' operator: [AuthnContextClassRefPrincipal{authnContextClassRef=urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport}] 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: No active results available, selecting an inactive flow 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Checking for an inactive flow compatible with operator 'exact' and principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:?] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 2019-02-18 09:06:04,277 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/Password 2019-02-18 09:06:04,278 - DEBUG [net.shibboleth.idp.authn.impl.ExtractUsernamePasswordFromBasicAuth:?] - Profile Action ExtractUsernamePasswordFromBasicAuth: No appropriate Authorization header found 2019-02-18 09:06:04,490 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Not a usual scheme, returning name of 'eplapps-dev' 2019-02-18 09:06:04,490 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:06:04,490 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No description matching the languages found, returning null 2019-02-18 09:06:16,570 - DEBUG [net.shibboleth.idp.authn.AbstractExtractionAction:?] - Profile Action ExtractUsernamePasswordFromFormRequest: Trimming whitespace of input string 'sheldon' 2019-02-18 09:06:16,571 - DEBUG [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Attempting to authenticate user sheldon 2019-02-18 09:06:16,571 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolve user=[org.ldaptive.auth.User@1706254870::identifier=sheldon, context=org.apache.velocity.VelocityContext@6de9ef8f] 2019-02-18 09:06:16,585 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolved dn=uid=sheldon,ou=People,dc=samltest,dc=id for user=[org.ldaptive.auth.User@1706254870::identifier=sheldon, context=org.apache.velocity.VelocityContext@6de9ef8f] 2019-02-18 09:06:16,587 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'sheldon' succeeded 2019-02-18 09:06:16,587 - DEBUG [net.shibboleth.idp.authn.AbstractValidationAction:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Adding custom Principal(s) defined on underlying flow descriptor 2019-02-18 09:06:16,587 - DEBUG [net.shibboleth.idp.authn.impl.PopulateSubjectCanonicalizationContext:?] - Profile Action PopulateSubjectCanonicalizationContext: Installing 2 canonicalization flows into SubjectCanonicalizationContext 2019-02-18 09:06:16,587 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/x500 for applicability... 2019-02-18 09:06:16,587 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Canonicalization flow c14n/x500 was not applicable to this request 2019-02-18 09:06:16,587 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/simple for applicability... 2019-02-18 09:06:16,587 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Selecting canonicalization flow c14n/simple 2019-02-18 09:06:16,588 - DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:?] - Profile Action SimpleSubjectCanonicalization: trimming whitespace of input string 'sheldon' 2019-02-18 09:06:16,588 - INFO [net.shibboleth.idp.session.impl.DetectIdentitySwitch:?] - Profile Action DetectIdentitySwitch: Identity switch to sheldon detected, destroying original session ca9d19e72ca5f6472661adbbb64f9788d86099167541d1bdad64c4992a2db507 for principal morty 2019-02-18 09:06:16,588 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Destroyed session ca9d19e72ca5f6472661adbbb64f9788d86099167541d1bdad64c4992a2db507 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Canonical principal name was established as 'sheldon' 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Checking result for compatibility with operator 'exact' and principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:?] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' in authentication result satisfies request for principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:?] - Profile Action UpdateSessionWithAuthenticationResult: Creating new session for principal sheldon 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Created new session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e for principal sheldon 2019-02-18 09:06:16,589 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving AuthenticationResult for flow authn/Password in session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:16,591 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:?] - Template text (uid=$resolutionContext.principal) yields (uid=sheldon) 2019-02-18 09:06:16,595 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter' Beginning process of filtering the following 7 attributes: [uid, telephoneNumber, Identifier, mail, displayName, surname, givenName] 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'uid' remained after filtering 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': no policy permitted release of attribute telephoneNumber values 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'Identifier' remained after filtering 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'mail' remained after filtering 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'displayName' remained after filtering 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'surname' remained after filtering 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering 2019-02-18 09:06:16,596 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:16,597 - DEBUG [net.shibboleth.idp.consent.flow.impl.InitializeConsentContext:?] - Profile Action InitializeConsentContext: Created consent context 'ConsentContext{previousConsents={}, chosenConsents={}}' 2019-02-18 09:06:16,598 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action PopulateAttributeReleaseContext: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@7eb664ab' 2019-02-18 09:06:16,598 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.PopulateAttributeReleaseContext:?] - Profile Action PopulateAttributeReleaseContext: Consentable attributes '{Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}, uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}}' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'sheldon:eplapps-dev' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'sheldon:eplapps-dev' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'sheldon:eplapps-dev' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'sheldon' 2019-02-18 09:06:16,599 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'sheldon' 2019-02-18 09:06:16,600 - DEBUG [net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:?] - Profile Action PopulateConsentContext: Populating consents: [Identifier, displayName, givenName, mail, surname, uid] 2019-02-18 09:06:16,600 - DEBUG [net.shibboleth.idp.consent.logic.impl.IsConsentRequiredPredicate:?] - Consent is required, no previous consents 2019-02-18 09:06:16,832 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Not a usual scheme, returning name of 'eplapps-dev' 2019-02-18 09:06:16,832 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No description matching the languages found, returning null 2019-02-18 09:06:16,832 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or InformationURLs returning null 2019-02-18 09:06:16,832 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or PrivacyStatementURLs returning null 2019-02-18 09:06:16,832 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:06:16,832 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No Organization, OrganizationName or names, returning null 2019-02-18 09:06:21,702 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Extracted consent ids '[Identifier, displayName, givenName, mail, surname, uid]' from request parameter '_shib_idp_consentIds' 2019-02-18 09:06:21,702 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Consent context 'ConsentContext{previousConsents={}, chosenConsents={Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}}' 2019-02-18 09:06:21,702 - INFO [Shibboleth-Consent-Audit.SSO:?] - 20190218T090621Z|eplapps-dev|AttributeReleaseConsent|sheldon|Identifier,displayName,givenName,mail,surname,uid||true,true,true,true,true,true 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'sheldon:eplapps-dev' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'sheldon:_key_idx' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.storage.impl.ConsentSerializer:?] - Serialized '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' as '[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}]' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.CreateResult:?] - Profile Action CreateResult: Created consent result 'ConsentResult{id=null, context=intercept/attribute-release, key=sheldon:eplapps-dev, value=[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}], expiration=1582016781711}' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Read storage record 'null' with context 'intercept/attribute-release' and key 'sheldon:_key_idx' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Will not prune storage records, number of keys '0' is less than max number of records '10' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Read storage record 'null' with context 'intercept/attribute-release' and key 'sheldon:_key_idx' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Creating storage index with key 'sheldon:eplapps-dev' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.storage.impl.CollectionSerializer:?] - Serialized '[sheldon:eplapps-dev]' as '["sheldon:eplapps-dev"]' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action ReleaseAttributes: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@7eb664ab' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Consents '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attributes before release '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}}' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}' will be released because consent is approved 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}' will be released because consent is approved 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}' will be released because consent is approved 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}' will be released because consent is approved 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}' will be released because consent is approved 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}' will be released because consent is approved 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Releasing attributes '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}}' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Not releasing attributes '{}' 2019-02-18 09:06:21,711 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:21,712 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractResponseShellAction:?] - Profile Action AddStatusResponseShell: Setting Issuer to https://samltest.id/saml/idp 2019-02-18 09:06:21,713 - DEBUG [org.opensaml.saml.common.profile.impl.AddInResponseToToResponse:?] - Profile Action AddInResponseToToResponse: Attempting to add InResponseTo to outgoing Response 2019-02-18 09:06:21,715 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAuthenticationStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Attempting to add an AuthenticationStatement to outgoing Assertion 2019-02-18 09:06:21,715 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Created Assertion _c628d2b076f52c31c1a99f17c6e048c2 2019-02-18 09:06:21,715 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Added Assertion _c628d2b076f52c31c1a99f17c6e048c2 to Response _b0329b12d9a747d34d9c54217dd83052 2019-02-18 09:06:21,715 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAuthnStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Added AuthenticationStatement to Assertion _c628d2b076f52c31c1a99f17c6e048c2 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:?] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value sheldon of attribute uid 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value scooper@samltest.id of attribute Identifier 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value scooper@samltest.id of attribute mail 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sheldor of attribute displayName 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Cooper of attribute surname 2019-02-18 09:06:21,716 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sheldon of attribute givenName 2019-02-18 09:06:21,717 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion Subjects 2019-02-18 09:06:21,717 - DEBUG [org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] - Policy checking disabled for NameIDPolicy with Format urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified 2019-02-18 09:06:21,717 - WARN [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:74] - Ignoring NameIDFormat metadata that includes the 'unspecified' format 2019-02-18 09:06:21,718 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - Configuration specifies the following formats: [] 2019-02-18 09:06:21,718 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - No formats specified in configuration or in metadata, returning default 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Candidate NameID formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:transient] 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Trying to generate identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:?] - Generating NameID AAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2m with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Successfully generated identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Successfully generated NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Added NameID to 1 assertion subject(s) 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Attempting to add SubjectConfirmation to assertions in outgoing Response 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Address to 172.31.0.68 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data InResponseTo to ONELOGIN_d7a4bc15516c5b227548c26a8c74218801321f3c 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Recipient to http://127.0.0.1:5000/auth/callback 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data NotOnOrAfter to 5 minutes from now 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Added SubjectConfirmation with method urn:oasis:names:tc:SAML:2.0:cm:bearer to 1 assertion(s) 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Attempting to add NotBefore condition to every Assertion in outgoing Response 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Added NotBefore condition to Assertion _c628d2b076f52c31c1a99f17c6e048c2 2019-02-18 09:06:21,718 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotBeforeConditionToAssertions: Assertion _c628d2b076f52c31c1a99f17c6e048c2 did not already contain Conditions, one was added 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Attempting to add NotOnOrAfter condition to every Assertion in outgoing Response 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Added NotOnOrAfter condition, indicating an expiration of 2019-02-18T09:11:21.712Z, to Assertion _c628d2b076f52c31c1a99f17c6e048c2 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Assertion _c628d2b076f52c31c1a99f17c6e048c2 already contained Conditions, nothing was done 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Attempting to add an AudienceRestrictionCondition to every Assertion in Response 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAudienceRestrictionToAssertions: Assertion _c628d2b076f52c31c1a99f17c6e048c2 already contained Conditions, nothing was done 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding new AudienceRestriction 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding eplapps-dev as an Audience of the AudienceRestriction 2019-02-18 09:06:21,719 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Added AudienceRestrictionCondition to Assertion _c628d2b076f52c31c1a99f17c6e048c2 2019-02-18 09:06:21,720 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:?] - Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party eplapps-dev to existing session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:21,720 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving SPSession for service eplapps-dev in session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:21,720 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:?] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession' 2019-02-18 09:06:21,721 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Maintaining secondary index for service ID eplapps-dev and key AAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2m 2019-02-18 09:06:21,726 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptNameIDs: No encryption parameters, nothing to do 2019-02-18 09:06:21,726 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptAttributes: No encryption parameters, nothing to do 2019-02-18 09:06:21,727 - DEBUG [org.opensaml.saml.common.profile.impl.SignAssertions:?] - Profile Action SignAssertions: Will not sign assertions because no security parameters context is available 2019-02-18 09:06:21,727 - DEBUG [PROTOCOL_MESSAGE:?] - Profile Action EncryptAssertions: Response before assertion encryption: https://samltest.id/saml/idp https://samltest.id/saml/idp AAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2m eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport sheldon scooper@samltest.id scooper@samltest.id Sheldor Cooper Sheldon 2019-02-18 09:06:21,728 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Assertion before encryption: https://samltest.id/saml/idp AAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2m eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport sheldon scooper@samltest.id scooper@samltest.id Sheldor Cooper Sheldon 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = AES/CBC/ISO10126Padding 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = ENCRYPT_MODE 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting element... 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Serialized octets: https://samltest.id/saml/idpAAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2meplapps-devurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransportsheldonscooper@samltest.idscooper@samltest.idSheldorCooperSheldon 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipherUtil:?] - Saw non-AES-GCM mode block cipher, returning IvParameterSpec: http://www.w3.org/2001/04/xmlenc#aes128-cbc 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Expected cipher.outputSize = 2944 2019-02-18 09:06:21,728 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Actual cipher.outputSize = 2944 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets: 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 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets length = 3948 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation and c14n algorithm 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = RSA/ECB/OAEPPadding 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = WRAP_MODE 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting key ... 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets: r2o4GYbEc+CrpqxEbQfTud5Ipi61odp84piPAm+yNZcngb60nj4eQ8Wf/1Mc4QxulHw4qMTeDlW3wkegmu/XKmmfuTV+VbXhzz70E7LbzL5CO/tgkDjrm1CEbGQyiDx+MACq6yGnM1li1bGy2ymIe10MGDMnNVlye4Tzq5JX/VnWkFf6B8ZJtsBJTnSiKTVbQHE/h2cFl5xxZS+Sbt3aefxS6Hini3q0IpFpgdzrr8uDpIZ1wbD35Rb0uqRkB3uKJosusrygCpdjQix1BmmL4auFzlXc2XOvLqUG1zanIdzwl9E1xHEPbQNX3aYAaqQWrb0Z22v0abanJuzSrWrNFQ== 2019-02-18 09:06:21,729 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets length = 344 2019-02-18 09:06:21,729 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Placing EncryptedKey elements inline inside EncryptedData 2019-02-18 09:06:21,732 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler:?] - Adding destination to outbound SAML 2 protocol message: http://127.0.0.1:5000/auth/callback 2019-02-18 09:06:21,732 - DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler:?] - Message Handler: Checking outbound endpoint for allowed URL scheme: http://127.0.0.1:5000/auth/callback 2019-02-18 09:06:21,732 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_b0329b12d9a747d34d9c54217dd83052" 2019-02-18 09:06:21,732 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _b0329b12d9a747d34d9c54217dd83052 and Element was [saml2p:Response: null] 2019-02-18 09:06:21,732 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_b0329b12d9a747d34d9c54217dd83052" 2019-02-18 09:06:21,732 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _b0329b12d9a747d34d9c54217dd83052 and Element was [saml2p:Response: null] 2019-02-18 09:06:21,733 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:06:21,733 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://samltest.id/saml/idpMIIDZTCCAk2gAwIBAgIUFIetDRTHLiBz9mIhkQ7cFau92ykwDQYJKoZIhvcNAQELBQAwQjELMAkG A1UEBhMCQkUxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55 IEx0ZDAeFw0xOTAxMjExMzI4NThaFw0yOTAxMTgxMzI4NThaMEIxCzAJBgNVBAYTAkJFMRUwEwYD VQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXG36Nl8QSimoe8N/YFr53ncWeKIMNj1bUXJA5ist7sog 9t1FanSpcqUtVwF06F9uEWSvMzEpdDjHo+BC3sYcWpNFikvWZndlKIs86awf9QK0WBGWy7RtFyVA rACEb6wid/qJ/CdfwfK/k1a0hxaLopad4a8dwFfzQWhZ8UtlHBkCCN0YskviYVoFDxiE0LUXmaEW WJaz5Ke4bQXmsxC/J4D4lM81Um/sKco0Sg+Fcclj7+4dIsX8FDhLsMkV5kmZGjiUjaDm9l713uF0 h9KBIFhsWFgsW88B2pHbdkPgzzGtSqf+0EbctoQXRy5NJgNZN6Z/H+W5515uqTMF/2AbAgMBAAGj UzBRMB0GA1UdDgQWBBQO6V7LGs5yEB0ZSs/WZwXlQuKQeDAfBgNVHSMEGDAWgBQO6V7LGs5yEB0Z Ss/WZwXlQuKQeDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAXERF9GjTgkz8/ RMEK2HzYUcfbc+9Tim/QgyQdIxhRTboG4wZ0QMTxuFJRvx7LhL61bEhjJzARVEQFaPoZP8qDY47u eNKEHfjpqrKEflAxjEQwy7rs7xL3gZUP8n6An/xz/6FsMKdczG//6hm23NVwS0bPIRW2MOqJ4JFZ NylepHyRtQF5WtnyHf7DWruP8AMXyMt+E+kxWjzGygU4GDn/asAbhNDHsQPmbWJHTOmGJ3CUxA38 DsJ4cj7Sxem06h4NBet0TOe8N/Jcf59RXgALJo5rmDj+CRqj79d5uecrWacO9t3bhpa+BVl4p+EM XuLDCWjzBFnVvDlC3mqHZY0Kr2o4GYbEc+CrpqxEbQfTud5Ipi61odp84piPAm+yNZcngb60nj4eQ8Wf/1Mc4QxulHw4qMTeDlW3wkegmu/XKmmfuTV+VbXhzz70E7LbzL5CO/tgkDjrm1CEbGQyiDx+MACq6yGnM1li1bGy2ymIe10MGDMnNVlye4Tzq5JX/VnWkFf6B8ZJtsBJTnSiKTVbQHE/h2cFl5xxZS+Sbt3aefxS6Hini3q0IpFpgdzrr8uDpIZ1wbD35Rb0uqRkB3uKJosusrygCpdjQix1BmmL4auFzlXc2XOvLqUG1zanIdzwl9E1xHEPbQNX3aYAaqQWrb0Z22v0abanJuzSrWrNFQ==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 2019-02-18 09:06:21,733 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:06:21,733 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - oh0GD+VjPu9vxnAna+cAhPzXU1GJPxtQ91WskRyJ8SQ= 2019-02-18 09:06:21,736 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:?] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:06:21,736 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Invoking Velocity template to create POST body 2019-02-18 09:06:21,736 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Encoding action url of 'http://127.0.0.1:5000/auth/callback' with encoded value 'http://127.0.0.1:5000/auth/callback' 2019-02-18 09:06:21,736 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Marshalling and Base64 encoding SAML message 2019-02-18 09:06:21,738 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Setting RelayState parameter to: 'http://127.0.0.1:5000/', encoded as 'http://127.0.0.1:5000/' 2019-02-18 09:06:21,741 - DEBUG [PROTOCOL_MESSAGE:?] - https://samltest.id/saml/idp oh0GD+VjPu9vxnAna+cAhPzXU1GJPxtQ91WskRyJ8SQ= HE4Nk7yeqQArTnj5iDRCxKk7l2V3tNAbdrkqHQCp+sa6SMoQYX8gZEhI///YNNsnZImmAMR2iA4f+9xNddtE5ppIvKA2pAj14AtxgW4chK9TRNHtkUfXEgG+WvMEuKlhMvNjdE6vqB7SICHnDVMsW4Eu8+qf+iteLPL+VDEad8BnDcgB/hGfsm11V93bxRl2OiO4B/YIU2/LXC9DzlPkqm7npOtQwJrRz6pgKC4ln5F6adOHLNqbj+POBjWX9jbaOOUE7n2q2g8BjfgdNvJ53rdbvwSo4TyCt/ygefvMtEhMylvtr5mNiBQqk4W5SyrqXTmnpb537VrKAPjJvlx1Ig== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== MIIDZTCCAk2gAwIBAgIUFIetDRTHLiBz9mIhkQ7cFau92ykwDQYJKoZIhvcNAQELBQAwQjELMAkG A1UEBhMCQkUxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55 IEx0ZDAeFw0xOTAxMjExMzI4NThaFw0yOTAxMTgxMzI4NThaMEIxCzAJBgNVBAYTAkJFMRUwEwYD VQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXG36Nl8QSimoe8N/YFr53ncWeKIMNj1bUXJA5ist7sog 9t1FanSpcqUtVwF06F9uEWSvMzEpdDjHo+BC3sYcWpNFikvWZndlKIs86awf9QK0WBGWy7RtFyVA rACEb6wid/qJ/CdfwfK/k1a0hxaLopad4a8dwFfzQWhZ8UtlHBkCCN0YskviYVoFDxiE0LUXmaEW WJaz5Ke4bQXmsxC/J4D4lM81Um/sKco0Sg+Fcclj7+4dIsX8FDhLsMkV5kmZGjiUjaDm9l713uF0 h9KBIFhsWFgsW88B2pHbdkPgzzGtSqf+0EbctoQXRy5NJgNZN6Z/H+W5515uqTMF/2AbAgMBAAGj UzBRMB0GA1UdDgQWBBQO6V7LGs5yEB0ZSs/WZwXlQuKQeDAfBgNVHSMEGDAWgBQO6V7LGs5yEB0Z Ss/WZwXlQuKQeDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAXERF9GjTgkz8/ RMEK2HzYUcfbc+9Tim/QgyQdIxhRTboG4wZ0QMTxuFJRvx7LhL61bEhjJzARVEQFaPoZP8qDY47u eNKEHfjpqrKEflAxjEQwy7rs7xL3gZUP8n6An/xz/6FsMKdczG//6hm23NVwS0bPIRW2MOqJ4JFZ NylepHyRtQF5WtnyHf7DWruP8AMXyMt+E+kxWjzGygU4GDn/asAbhNDHsQPmbWJHTOmGJ3CUxA38 DsJ4cj7Sxem06h4NBet0TOe8N/Jcf59RXgALJo5rmDj+CRqj79d5uecrWacO9t3bhpa+BVl4p+EM XuLDCWjzBFnVvDlC3mqHZY0K r2o4GYbEc+CrpqxEbQfTud5Ipi61odp84piPAm+yNZcngb60nj4eQ8Wf/1Mc4QxulHw4qMTeDlW3wkegmu/XKmmfuTV+VbXhzz70E7LbzL5CO/tgkDjrm1CEbGQyiDx+MACq6yGnM1li1bGy2ymIe10MGDMnNVlye4Tzq5JX/VnWkFf6B8ZJtsBJTnSiKTVbQHE/h2cFl5xxZS+Sbt3aefxS6Hini3q0IpFpgdzrr8uDpIZ1wbD35Rb0uqRkB3uKJosusrygCpdjQix1BmmL4auFzlXc2XOvLqUG1zanIdzwl9E1xHEPbQNX3aYAaqQWrb0Z22v0abanJuzSrWrNFQ== 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 2019-02-18 09:06:21,741 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:?] - Profile Action RecordResponseComplete: Record response complete 2019-02-18 09:06:21,741 - INFO [Shibboleth-Audit.SSO:?] - 20190218T090621Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|ONELOGIN_d7a4bc15516c5b227548c26a8c74218801321f3c|eplapps-dev|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://samltest.id/saml/idp|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_b0329b12d9a747d34d9c54217dd83052|sheldon|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,Identifier,mail,displayName,surname,givenName|AAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2m|_c628d2b076f52c31c1a99f17c6e048c2| 2019-02-18 09:06:54,504 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded RelayState: http://127.0.0.1:5000/ 2019-02-18 09:06:54,504 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Base64 decoding and inflating SAML message 2019-02-18 09:06:54,505 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded SAML message 2019-02-18 09:06:54,505 - DEBUG [PROTOCOL_MESSAGE:?] - eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:?] - Metadata Resolver FilesystemMetadataResolver SAMLtest: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=eplapps-dev] 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 source EntityDescriptors 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Attempting to filter candidate RoleDescriptors via resolved Predicates 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - After predicate filtering 1 RoleDescriptors remain 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:?] - Message Handler: org.opensaml.saml.common.messaging.context.SAMLMetadataContext added to MessageContext as child of org.opensaml.saml.common.messaging.context.SAMLPeerEntityContext 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: Selecting default AttributeConsumingService, if any 2019-02-18 09:06:54,512 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: No AttributeConsumingService selected 2019-02-18 09:06:54,512 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:?] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer eplapps-dev 2019-02-18 09:06:54,513 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:54,514 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Checking SAML message intended destination endpoint against receiver endpoint 2019-02-18 09:06:54,514 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Intended message destination endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:06:54,514 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Actual message receiver endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:06:54,514 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: SAML message intended destination endpoint matched recipient endpoint 2019-02-18 09:06:54,516 - DEBUG [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:?] - Message Handler: Evaluating message replay for message ID 'ONELOGIN_70e1f11ed1515ab2a830bff98ee9b446f9635154', issue instant '2019-02-18T09:06:54.000Z', entityID 'eplapps-dev' 2019-02-18 09:06:54,516 - DEBUG [org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler:?] - SPSSODescriptor for entity ID 'eplapps-dev' does not require AuthnRequests to be signed 2019-02-18 09:06:54,517 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: SAML protocol message was not signed, skipping XML signature processing 2019-02-18 09:06:54,517 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler 2019-02-18 09:06:54,517 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: HTTP request was not signed via simple signature mechanism, skipping 2019-02-18 09:06:54,517 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler 2019-02-18 09:06:54,517 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Handler can not handle this request, skipping 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:?] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Attempting to resolve endpoint of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService for outbound message 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest 2019-02-18 09:06:54,518 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:?] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 1 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location http://127.0.0.1:5000/auth/callback using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was resolved, won't be able to determine delegation requested status via metadata 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was available 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Delegation request was not explicitly indicated, using default value: NOT_REQUESTED 2019-02-18 09:06:54,518 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Issuance of a delegated Assertion is not in effect, skipping further processing 2019-02-18 09:06:54,518 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing enabled 2019-02-18 09:06:54,521 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing not enabled 2019-02-18 09:06:54,521 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Encryption for assertions (true), identifiers (false), attributes(false) 2019-02-18 09:06:54,521 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolving EncryptionParameters for request 2019-02-18 09:06:54,521 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding entityID to resolution criteria 2019-02-18 09:06:54,521 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding role metadata to resolution criteria 2019-02-18 09:06:54,521 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolving credentials from supplied RoleDescriptor using usage: ENCRYPTION. Effective entityID was: eplapps-dev 2019-02-18 09:06:54,521 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolved cached credentials from KeyDescriptor object metadata 2019-02-18 09:06:54,521 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve data encryption algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:06:54,521 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve key transport algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:06:54,521 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolved EncryptionParameters 2019-02-18 09:06:54,526 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:?] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing 2019-02-18 09:06:54,526 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeAuthenticationContext:?] - Profile Action InitializeAuthenticationContext: Created authentication context: AuthenticationContext{initiationInstant=2019-02-18T09:06:54.526Z, isPassive=false, forceAuthn=false, hintedName=null, maxAge=0, potentialFlows=[], activeResults=[], attemptedFlow=null, signaledFlowId=null, authenticationStateMap={}, resultCacheable=true, initialAuthenticationResult=null, authenticationResult=null, completionInstant=1970-01-01T00:00:00.000Z} 2019-02-18 09:06:54,527 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.ProcessRequestedAuthnContext:?] - Profile Action ProcessRequestedAuthnContext: RequestedPrincipalContext created with operator exact and 1 custom principal(s) 2019-02-18 09:06:54,527 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:?] - Profile Action PopulateAuthenticationContext: Installed 1 potential authentication flows into AuthenticationContext 2019-02-18 09:06:54,527 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Performing primary lookup on session ID a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:54,527 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Updating expiration of master record for session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e to 2019-02-18T10:06:54.527Z 2019-02-18 09:06:54,528 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Loading AuthenticationResult for flow authn/Password in session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:54,528 - DEBUG [net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults:?] - Profile Action ExtractActiveAuthenticationResults: Authentication result authn/Password is active, copying from session 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.InitializeRequestedPrincipalContext:?] - Profile Action InitializeRequestedPrincipalContext: Leaving existing RequestedPrincipalContext in place 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:?] - Profile Action FilterFlowsByForcedAuthn: Request does not have forced authentication requirement, nothing to do 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Specific principals requested with 'exact' operator: [AuthnContextClassRefPrincipal{authnContextClassRef=urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport}] 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Checking for an inactive flow or active result compatible with operator 'exact' and principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:?] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Reusing active result authn/Password 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Canonical principal name established from session as 'sheldon' 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Checking result for compatibility with operator 'exact' and principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:?] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' in authentication result satisfies request for principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:06:54,529 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:?] - Profile Action UpdateSessionWithAuthenticationResult: Updating activity time on reused AuthenticationResult for flow authn/Password in existing session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:54,531 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:?] - Template text (uid=$resolutionContext.principal) yields (uid=sheldon) 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter' Beginning process of filtering the following 7 attributes: [uid, telephoneNumber, Identifier, mail, displayName, surname, givenName] 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'uid' remained after filtering 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': no policy permitted release of attribute telephoneNumber values 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'Identifier' remained after filtering 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'mail' remained after filtering 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'displayName' remained after filtering 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'surname' remained after filtering 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:54,534 - DEBUG [net.shibboleth.idp.consent.flow.impl.InitializeConsentContext:?] - Profile Action InitializeConsentContext: Created consent context 'ConsentContext{previousConsents={}, chosenConsents={}}' 2019-02-18 09:06:54,535 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action PopulateAttributeReleaseContext: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@6d8c8d7a' 2019-02-18 09:06:54,535 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.PopulateAttributeReleaseContext:?] - Profile Action PopulateAttributeReleaseContext: Consentable attributes '{Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}, uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}}' 2019-02-18 09:06:54,535 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:06:54,535 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'sheldon:eplapps-dev' 2019-02-18 09:06:54,535 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'org.opensaml.storage.MutableStorageRecord@59eecaa3' with context 'intercept/attribute-release' and key 'sheldon:eplapps-dev' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.storage.impl.ConsentSerializer:?] - Deserialized context 'intercept/attribute-release' key 'sheldon:eplapps-dev' value '[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}]' expiration '1582016781711' as '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'sheldon' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'sheldon' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:?] - Profile Action PopulateConsentContext: Populating consents: [Identifier, displayName, givenName, mail, surname, uid] 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.logic.impl.IsConsentRequiredPredicate:?] - Consent is not required, previous consents match current consents 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action ReleaseAttributes: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@6d8c8d7a' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Consents '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attributes before release '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}}' 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}' will be released because consent is approved 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}' will be released because consent is approved 2019-02-18 09:06:54,536 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}' will be released because consent is approved 2019-02-18 09:06:54,537 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}' will be released because consent is approved 2019-02-18 09:06:54,537 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}' will be released because consent is approved 2019-02-18 09:06:54,537 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}' will be released because consent is approved 2019-02-18 09:06:54,537 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Releasing attributes '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=sheldon}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=scooper@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=scooper@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Sheldor}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Cooper}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Sheldon}]}}' 2019-02-18 09:06:54,537 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Not releasing attributes '{}' 2019-02-18 09:06:54,537 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:06:54,537 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractResponseShellAction:?] - Profile Action AddStatusResponseShell: Setting Issuer to https://samltest.id/saml/idp 2019-02-18 09:06:54,538 - DEBUG [org.opensaml.saml.common.profile.impl.AddInResponseToToResponse:?] - Profile Action AddInResponseToToResponse: Attempting to add InResponseTo to outgoing Response 2019-02-18 09:06:54,541 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAuthenticationStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Attempting to add an AuthenticationStatement to outgoing Assertion 2019-02-18 09:06:54,541 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Created Assertion _531b956855bf5ba19b4be4bbd2532412 2019-02-18 09:06:54,541 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Added Assertion _531b956855bf5ba19b4be4bbd2532412 to Response _6a60acb0e6723a108cdd2228de1df768 2019-02-18 09:06:54,541 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAuthnStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Added AuthenticationStatement to Assertion _531b956855bf5ba19b4be4bbd2532412 2019-02-18 09:06:54,542 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:?] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion 2019-02-18 09:06:54,543 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value sheldon of attribute uid 2019-02-18 09:06:54,543 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value scooper@samltest.id of attribute Identifier 2019-02-18 09:06:54,543 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value scooper@samltest.id of attribute mail 2019-02-18 09:06:54,543 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sheldor of attribute displayName 2019-02-18 09:06:54,543 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Cooper of attribute surname 2019-02-18 09:06:54,543 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sheldon of attribute givenName 2019-02-18 09:06:54,544 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion Subjects 2019-02-18 09:06:54,544 - DEBUG [org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] - Policy checking disabled for NameIDPolicy with Format urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified 2019-02-18 09:06:54,544 - WARN [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:74] - Ignoring NameIDFormat metadata that includes the 'unspecified' format 2019-02-18 09:06:54,545 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - Configuration specifies the following formats: [] 2019-02-18 09:06:54,545 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - No formats specified in configuration or in metadata, returning default 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Candidate NameID formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:transient] 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Trying to generate identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:?] - Generating NameID AAdzZWNyZXQxxcvgdKhrsu/HTM9dMkvU8THVWWAmttTv3nQaHSKVl7e8oJY//3NAmv4WuVaUXDMvPorWHEpNtfzrG6XoJwj+Tj/trqeG5RzE+7pNj2iO9oHD with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Successfully generated identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Successfully generated NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Added NameID to 1 assertion subject(s) 2019-02-18 09:06:54,545 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Attempting to add SubjectConfirmation to assertions in outgoing Response 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Address to 172.31.0.68 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data InResponseTo to ONELOGIN_70e1f11ed1515ab2a830bff98ee9b446f9635154 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Recipient to http://127.0.0.1:5000/auth/callback 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data NotOnOrAfter to 5 minutes from now 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Added SubjectConfirmation with method urn:oasis:names:tc:SAML:2.0:cm:bearer to 1 assertion(s) 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Attempting to add NotBefore condition to every Assertion in outgoing Response 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Added NotBefore condition to Assertion _531b956855bf5ba19b4be4bbd2532412 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotBeforeConditionToAssertions: Assertion _531b956855bf5ba19b4be4bbd2532412 did not already contain Conditions, one was added 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Attempting to add NotOnOrAfter condition to every Assertion in outgoing Response 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Added NotOnOrAfter condition, indicating an expiration of 2019-02-18T09:11:54.537Z, to Assertion _531b956855bf5ba19b4be4bbd2532412 2019-02-18 09:06:54,546 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Assertion _531b956855bf5ba19b4be4bbd2532412 already contained Conditions, nothing was done 2019-02-18 09:06:54,547 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Attempting to add an AudienceRestrictionCondition to every Assertion in Response 2019-02-18 09:06:54,547 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAudienceRestrictionToAssertions: Assertion _531b956855bf5ba19b4be4bbd2532412 already contained Conditions, nothing was done 2019-02-18 09:06:54,547 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding new AudienceRestriction 2019-02-18 09:06:54,547 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding eplapps-dev as an Audience of the AudienceRestriction 2019-02-18 09:06:54,547 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Added AudienceRestrictionCondition to Assertion _531b956855bf5ba19b4be4bbd2532412 2019-02-18 09:06:54,548 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:?] - Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party eplapps-dev to existing session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Loading SPSession for service eplapps-dev in session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:?] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession' 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving SPSession for service eplapps-dev in session a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:?] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession' 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.AbstractIdPSession:?] - IdPSession a41f0495b095cb4af3119f0f48206ae757131db922c2947720ac37574709f64e: replaced old SPSession for service eplapps-dev 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Removing secondary index for service ID eplapps-dev and key AAdzZWNyZXQxkeMrtggTDGwmfCMRuhNKiXEQGK1CqNaO4KT8LmHES9UyMOEKuJq7LPsZT3fbtlDh7B9Y0EQLKZU/HpmfpHY3r+ewI6N0OKYOw3gm0xmqKu2m 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Maintaining secondary index for service ID eplapps-dev and key AAdzZWNyZXQxxcvgdKhrsu/HTM9dMkvU8THVWWAmttTv3nQaHSKVl7e8oJY//3NAmv4WuVaUXDMvPorWHEpNtfzrG6XoJwj+Tj/trqeG5RzE+7pNj2iO9oHD 2019-02-18 09:06:54,549 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:?] - Profile Action UpdateSessionWithSPSession: Older SPSession for relying party eplapps-dev was replaced 2019-02-18 09:06:54,550 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptNameIDs: No encryption parameters, nothing to do 2019-02-18 09:06:54,550 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptAttributes: No encryption parameters, nothing to do 2019-02-18 09:06:54,550 - DEBUG [org.opensaml.saml.common.profile.impl.SignAssertions:?] - Profile Action SignAssertions: Will not sign assertions because no security parameters context is available 2019-02-18 09:06:54,551 - DEBUG [PROTOCOL_MESSAGE:?] - Profile Action EncryptAssertions: Response before assertion encryption: https://samltest.id/saml/idp https://samltest.id/saml/idp AAdzZWNyZXQxxcvgdKhrsu/HTM9dMkvU8THVWWAmttTv3nQaHSKVl7e8oJY//3NAmv4WuVaUXDMvPorWHEpNtfzrG6XoJwj+Tj/trqeG5RzE+7pNj2iO9oHD eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport sheldon scooper@samltest.id scooper@samltest.id Sheldor Cooper Sheldon 2019-02-18 09:06:54,552 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Assertion before encryption: https://samltest.id/saml/idp AAdzZWNyZXQxxcvgdKhrsu/HTM9dMkvU8THVWWAmttTv3nQaHSKVl7e8oJY//3NAmv4WuVaUXDMvPorWHEpNtfzrG6XoJwj+Tj/trqeG5RzE+7pNj2iO9oHD eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport sheldon scooper@samltest.id scooper@samltest.id Sheldor Cooper Sheldon 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = AES/CBC/ISO10126Padding 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = ENCRYPT_MODE 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting element... 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Serialized octets: https://samltest.id/saml/idpAAdzZWNyZXQxxcvgdKhrsu/HTM9dMkvU8THVWWAmttTv3nQaHSKVl7e8oJY//3NAmv4WuVaUXDMvPorWHEpNtfzrG6XoJwj+Tj/trqeG5RzE+7pNj2iO9oHDeplapps-devurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransportsheldonscooper@samltest.idscooper@samltest.idSheldorCooperSheldon 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipherUtil:?] - Saw non-AES-GCM mode block cipher, returning IvParameterSpec: http://www.w3.org/2001/04/xmlenc#aes128-cbc 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Expected cipher.outputSize = 2944 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Actual cipher.outputSize = 2944 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets: 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 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets length = 3948 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation and c14n algorithm 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = RSA/ECB/OAEPPadding 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = WRAP_MODE 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting key ... 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets: ll+oxkKdwaa/jUesJ32fQnApG65y/dxPxLbsNmmArKegGtj3DL9Lopl9vqdqEtlNOCeRuIcc5mxWg1RDKpfWmAzO5scr/00n30St6Xqwu/FdpIvZgyI/Plr5/V74d5kRZa3GQogyuZGx+l/K0I8G/vxpQ+eKkq9TL57/q8Ueh6QAesP78mGwvlqzSklyeD2e5Pj9l22iN1vakMOPUbqFj49izyCt5obHyiRci3LZCWRtP+vPU+G+Jsu99W2l1wz6m0DYNE4W9dLAz0dIo9uu9sMbvIWbPnAjB+nbgE4388z9cBk+qohjsbcITEsAgF0F6hGMEQLCWw9J025L68U2cA== 2019-02-18 09:06:54,552 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets length = 344 2019-02-18 09:06:54,553 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Placing EncryptedKey elements inline inside EncryptedData 2019-02-18 09:06:54,555 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler:?] - Adding destination to outbound SAML 2 protocol message: http://127.0.0.1:5000/auth/callback 2019-02-18 09:06:54,555 - DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler:?] - Message Handler: Checking outbound endpoint for allowed URL scheme: http://127.0.0.1:5000/auth/callback 2019-02-18 09:06:54,556 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_6a60acb0e6723a108cdd2228de1df768" 2019-02-18 09:06:54,556 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _6a60acb0e6723a108cdd2228de1df768 and Element was [saml2p:Response: null] 2019-02-18 09:06:54,556 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_6a60acb0e6723a108cdd2228de1df768" 2019-02-18 09:06:54,556 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _6a60acb0e6723a108cdd2228de1df768 and Element was [saml2p:Response: null] 2019-02-18 09:06:54,556 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:06:54,556 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://samltest.id/saml/idpMIIDZTCCAk2gAwIBAgIUFIetDRTHLiBz9mIhkQ7cFau92ykwDQYJKoZIhvcNAQELBQAwQjELMAkG A1UEBhMCQkUxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55 IEx0ZDAeFw0xOTAxMjExMzI4NThaFw0yOTAxMTgxMzI4NThaMEIxCzAJBgNVBAYTAkJFMRUwEwYD VQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXG36Nl8QSimoe8N/YFr53ncWeKIMNj1bUXJA5ist7sog 9t1FanSpcqUtVwF06F9uEWSvMzEpdDjHo+BC3sYcWpNFikvWZndlKIs86awf9QK0WBGWy7RtFyVA rACEb6wid/qJ/CdfwfK/k1a0hxaLopad4a8dwFfzQWhZ8UtlHBkCCN0YskviYVoFDxiE0LUXmaEW WJaz5Ke4bQXmsxC/J4D4lM81Um/sKco0Sg+Fcclj7+4dIsX8FDhLsMkV5kmZGjiUjaDm9l713uF0 h9KBIFhsWFgsW88B2pHbdkPgzzGtSqf+0EbctoQXRy5NJgNZN6Z/H+W5515uqTMF/2AbAgMBAAGj UzBRMB0GA1UdDgQWBBQO6V7LGs5yEB0ZSs/WZwXlQuKQeDAfBgNVHSMEGDAWgBQO6V7LGs5yEB0Z Ss/WZwXlQuKQeDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAXERF9GjTgkz8/ RMEK2HzYUcfbc+9Tim/QgyQdIxhRTboG4wZ0QMTxuFJRvx7LhL61bEhjJzARVEQFaPoZP8qDY47u eNKEHfjpqrKEflAxjEQwy7rs7xL3gZUP8n6An/xz/6FsMKdczG//6hm23NVwS0bPIRW2MOqJ4JFZ NylepHyRtQF5WtnyHf7DWruP8AMXyMt+E+kxWjzGygU4GDn/asAbhNDHsQPmbWJHTOmGJ3CUxA38 DsJ4cj7Sxem06h4NBet0TOe8N/Jcf59RXgALJo5rmDj+CRqj79d5uecrWacO9t3bhpa+BVl4p+EM XuLDCWjzBFnVvDlC3mqHZY0Kll+oxkKdwaa/jUesJ32fQnApG65y/dxPxLbsNmmArKegGtj3DL9Lopl9vqdqEtlNOCeRuIcc5mxWg1RDKpfWmAzO5scr/00n30St6Xqwu/FdpIvZgyI/Plr5/V74d5kRZa3GQogyuZGx+l/K0I8G/vxpQ+eKkq9TL57/q8Ueh6QAesP78mGwvlqzSklyeD2e5Pj9l22iN1vakMOPUbqFj49izyCt5obHyiRci3LZCWRtP+vPU+G+Jsu99W2l1wz6m0DYNE4W9dLAz0dIo9uu9sMbvIWbPnAjB+nbgE4388z9cBk+qohjsbcITEsAgF0F6hGMEQLCWw9J025L68U2cA==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 2019-02-18 09:06:54,557 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:06:54,557 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - wOWYEHCiZPYOonF25hEQikU4i+GMjXWMXirRgR7jPDY= 2019-02-18 09:06:54,560 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:?] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:06:54,560 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Invoking Velocity template to create POST body 2019-02-18 09:06:54,560 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Encoding action url of 'http://127.0.0.1:5000/auth/callback' with encoded value 'http://127.0.0.1:5000/auth/callback' 2019-02-18 09:06:54,560 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Marshalling and Base64 encoding SAML message 2019-02-18 09:06:54,561 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Setting RelayState parameter to: 'http://127.0.0.1:5000/', encoded as 'http://127.0.0.1:5000/' 2019-02-18 09:06:54,568 - DEBUG [PROTOCOL_MESSAGE:?] - https://samltest.id/saml/idp wOWYEHCiZPYOonF25hEQikU4i+GMjXWMXirRgR7jPDY= geaGXMKEt7nAj6OV3Th0d0Yk2nBjNmtC4k+y7fXN6qsZf7badjFUJPW/4bAjHBnDuAIqTS4YjKhpRiwKg1JwzbBxjhd9sH/rrRIgfTQ1k+4opDVhDwt1XC+5NUys0w+WJdEr/+A4xbmEiTqS6zvrUiKDSShbN8pcjBRJsz4+xZeHVuBleAwKAo0jgCn+vBi7elMNYHUPWkyY9ctZD+Ts9DJGWK9XYEL/DbfKk3v01fhlT1leGiJUVaqFAl21bug1+zBf9+5tuwd89YSvsdYqplNbYdKN0vMIX9P3MwJqq1D55y7701eF2/1ziLUdW2ULzRFsYU4NOTdvi8pClit1KQ== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== MIIDZTCCAk2gAwIBAgIUFIetDRTHLiBz9mIhkQ7cFau92ykwDQYJKoZIhvcNAQELBQAwQjELMAkG A1UEBhMCQkUxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55 IEx0ZDAeFw0xOTAxMjExMzI4NThaFw0yOTAxMTgxMzI4NThaMEIxCzAJBgNVBAYTAkJFMRUwEwYD VQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXG36Nl8QSimoe8N/YFr53ncWeKIMNj1bUXJA5ist7sog 9t1FanSpcqUtVwF06F9uEWSvMzEpdDjHo+BC3sYcWpNFikvWZndlKIs86awf9QK0WBGWy7RtFyVA rACEb6wid/qJ/CdfwfK/k1a0hxaLopad4a8dwFfzQWhZ8UtlHBkCCN0YskviYVoFDxiE0LUXmaEW WJaz5Ke4bQXmsxC/J4D4lM81Um/sKco0Sg+Fcclj7+4dIsX8FDhLsMkV5kmZGjiUjaDm9l713uF0 h9KBIFhsWFgsW88B2pHbdkPgzzGtSqf+0EbctoQXRy5NJgNZN6Z/H+W5515uqTMF/2AbAgMBAAGj UzBRMB0GA1UdDgQWBBQO6V7LGs5yEB0ZSs/WZwXlQuKQeDAfBgNVHSMEGDAWgBQO6V7LGs5yEB0Z Ss/WZwXlQuKQeDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAXERF9GjTgkz8/ RMEK2HzYUcfbc+9Tim/QgyQdIxhRTboG4wZ0QMTxuFJRvx7LhL61bEhjJzARVEQFaPoZP8qDY47u eNKEHfjpqrKEflAxjEQwy7rs7xL3gZUP8n6An/xz/6FsMKdczG//6hm23NVwS0bPIRW2MOqJ4JFZ NylepHyRtQF5WtnyHf7DWruP8AMXyMt+E+kxWjzGygU4GDn/asAbhNDHsQPmbWJHTOmGJ3CUxA38 DsJ4cj7Sxem06h4NBet0TOe8N/Jcf59RXgALJo5rmDj+CRqj79d5uecrWacO9t3bhpa+BVl4p+EM XuLDCWjzBFnVvDlC3mqHZY0K ll+oxkKdwaa/jUesJ32fQnApG65y/dxPxLbsNmmArKegGtj3DL9Lopl9vqdqEtlNOCeRuIcc5mxWg1RDKpfWmAzO5scr/00n30St6Xqwu/FdpIvZgyI/Plr5/V74d5kRZa3GQogyuZGx+l/K0I8G/vxpQ+eKkq9TL57/q8Ueh6QAesP78mGwvlqzSklyeD2e5Pj9l22iN1vakMOPUbqFj49izyCt5obHyiRci3LZCWRtP+vPU+G+Jsu99W2l1wz6m0DYNE4W9dLAz0dIo9uu9sMbvIWbPnAjB+nbgE4388z9cBk+qohjsbcITEsAgF0F6hGMEQLCWw9J025L68U2cA== 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 2019-02-18 09:06:54,568 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:?] - Profile Action RecordResponseComplete: Record response complete 2019-02-18 09:06:54,569 - INFO [Shibboleth-Audit.SSO:?] - 20190218T090654Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|ONELOGIN_70e1f11ed1515ab2a830bff98ee9b446f9635154|eplapps-dev|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://samltest.id/saml/idp|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_6a60acb0e6723a108cdd2228de1df768|sheldon|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,Identifier,mail,displayName,surname,givenName|AAdzZWNyZXQxxcvgdKhrsu/HTM9dMkvU8THVWWAmttTv3nQaHSKVl7e8oJY//3NAmv4WuVaUXDMvPorWHEpNtfzrG6XoJwj+Tj/trqeG5RzE+7pNj2iO9oHD|_531b956855bf5ba19b4be4bbd2532412| 2019-02-18 09:07:47,876 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded RelayState: http://127.0.0.1:5000/ 2019-02-18 09:07:47,876 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Base64 decoding and inflating SAML message 2019-02-18 09:07:47,876 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded SAML message 2019-02-18 09:07:47,877 - DEBUG [PROTOCOL_MESSAGE:?] - eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:?] - Metadata Resolver FilesystemMetadataResolver SAMLtest: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=eplapps-dev] 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 source EntityDescriptors 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Attempting to filter candidate RoleDescriptors via resolved Predicates 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - After predicate filtering 1 RoleDescriptors remain 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:?] - Message Handler: org.opensaml.saml.common.messaging.context.SAMLMetadataContext added to MessageContext as child of org.opensaml.saml.common.messaging.context.SAMLPeerEntityContext 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: Selecting default AttributeConsumingService, if any 2019-02-18 09:07:47,887 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: No AttributeConsumingService selected 2019-02-18 09:07:47,887 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:?] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer eplapps-dev 2019-02-18 09:07:47,888 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:07:47,888 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Checking SAML message intended destination endpoint against receiver endpoint 2019-02-18 09:07:47,888 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Intended message destination endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:07:47,888 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Actual message receiver endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:07:47,889 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: SAML message intended destination endpoint matched recipient endpoint 2019-02-18 09:07:47,889 - DEBUG [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:?] - Message Handler: Evaluating message replay for message ID 'ONELOGIN_116c9fd7026609cc89613ad3b92dd5d7d1b68b7a', issue instant '2019-02-18T09:07:47.000Z', entityID 'eplapps-dev' 2019-02-18 09:07:47,889 - DEBUG [org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler:?] - SPSSODescriptor for entity ID 'eplapps-dev' does not require AuthnRequests to be signed 2019-02-18 09:07:47,890 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: SAML protocol message was not signed, skipping XML signature processing 2019-02-18 09:07:47,890 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler 2019-02-18 09:07:47,890 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: HTTP request was not signed via simple signature mechanism, skipping 2019-02-18 09:07:47,890 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler 2019-02-18 09:07:47,890 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Handler can not handle this request, skipping 2019-02-18 09:07:47,890 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:07:47,890 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:?] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Attempting to resolve endpoint of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService for outbound message 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest 2019-02-18 09:07:47,891 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:?] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 1 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location http://127.0.0.1:5000/auth/callback using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was resolved, won't be able to determine delegation requested status via metadata 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was available 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Delegation request was not explicitly indicated, using default value: NOT_REQUESTED 2019-02-18 09:07:47,891 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Issuance of a delegated Assertion is not in effect, skipping further processing 2019-02-18 09:07:47,891 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing enabled 2019-02-18 09:07:47,892 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing not enabled 2019-02-18 09:07:47,892 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Encryption for assertions (true), identifiers (false), attributes(false) 2019-02-18 09:07:47,892 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolving EncryptionParameters for request 2019-02-18 09:07:47,892 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding entityID to resolution criteria 2019-02-18 09:07:47,892 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding role metadata to resolution criteria 2019-02-18 09:07:47,892 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolving credentials from supplied RoleDescriptor using usage: ENCRYPTION. Effective entityID was: eplapps-dev 2019-02-18 09:07:47,892 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolved cached credentials from KeyDescriptor object metadata 2019-02-18 09:07:47,892 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve data encryption algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:07:47,892 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve key transport algorithm based on SAML metadata, falling back to locally configured algorithms 2019-02-18 09:07:47,892 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolved EncryptionParameters 2019-02-18 09:07:47,897 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:?] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing 2019-02-18 09:07:47,898 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeAuthenticationContext:?] - Profile Action InitializeAuthenticationContext: Created authentication context: AuthenticationContext{initiationInstant=2019-02-18T09:07:47.898Z, isPassive=false, forceAuthn=false, hintedName=null, maxAge=0, potentialFlows=[], activeResults=[], attemptedFlow=null, signaledFlowId=null, authenticationStateMap={}, resultCacheable=true, initialAuthenticationResult=null, authenticationResult=null, completionInstant=1970-01-01T00:00:00.000Z} 2019-02-18 09:07:47,898 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.ProcessRequestedAuthnContext:?] - Profile Action ProcessRequestedAuthnContext: RequestedPrincipalContext created with operator exact and 1 custom principal(s) 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:?] - Profile Action PopulateAuthenticationContext: Installed 1 potential authentication flows into AuthenticationContext 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.session.impl.PopulateSessionContext:?] - Profile Action PopulateSessionContext: No session found for client 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.InitializeRequestedPrincipalContext:?] - Profile Action InitializeRequestedPrincipalContext: Leaving existing RequestedPrincipalContext in place 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:?] - Profile Action FilterFlowsByForcedAuthn: Request does not have forced authentication requirement, nothing to do 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Specific principals requested with 'exact' operator: [AuthnContextClassRefPrincipal{authnContextClassRef=urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport}] 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: No active results available, selecting an inactive flow 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Checking for an inactive flow compatible with operator 'exact' and principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:?] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 2019-02-18 09:07:47,899 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/Password 2019-02-18 09:07:47,900 - DEBUG [net.shibboleth.idp.authn.impl.ExtractUsernamePasswordFromBasicAuth:?] - Profile Action ExtractUsernamePasswordFromBasicAuth: No appropriate Authorization header found 2019-02-18 09:07:48,087 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Not a usual scheme, returning name of 'eplapps-dev' 2019-02-18 09:07:48,087 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:07:48,087 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No description matching the languages found, returning null 2019-02-18 09:07:57,621 - DEBUG [net.shibboleth.idp.authn.AbstractExtractionAction:?] - Profile Action ExtractUsernamePasswordFromFormRequest: Trimming whitespace of input string 'rick' 2019-02-18 09:07:57,622 - DEBUG [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Attempting to authenticate user rick 2019-02-18 09:07:57,622 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolve user=[org.ldaptive.auth.User@1559014737::identifier=rick, context=org.apache.velocity.VelocityContext@334ba5d5] 2019-02-18 09:07:57,636 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolved dn=uid=rick,ou=People,dc=samltest,dc=id for user=[org.ldaptive.auth.User@1559014737::identifier=rick, context=org.apache.velocity.VelocityContext@334ba5d5] 2019-02-18 09:07:57,637 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'rick' succeeded 2019-02-18 09:07:57,637 - DEBUG [net.shibboleth.idp.authn.AbstractValidationAction:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Adding custom Principal(s) defined on underlying flow descriptor 2019-02-18 09:07:57,637 - DEBUG [net.shibboleth.idp.authn.impl.PopulateSubjectCanonicalizationContext:?] - Profile Action PopulateSubjectCanonicalizationContext: Installing 2 canonicalization flows into SubjectCanonicalizationContext 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/x500 for applicability... 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Canonicalization flow c14n/x500 was not applicable to this request 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/simple for applicability... 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Selecting canonicalization flow c14n/simple 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:?] - Profile Action SimpleSubjectCanonicalization: trimming whitespace of input string 'rick' 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.session.impl.DetectIdentitySwitch:?] - Profile Action DetectIdentitySwitch: No previous session found, nothing to do 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Canonical principal name was established as 'rick' 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Checking result for compatibility with operator 'exact' and principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:?] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' in authentication result satisfies request for principal 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:?] - Profile Action UpdateSessionWithAuthenticationResult: Creating new session for principal rick 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Created new session 7a4b4323f16bf9ca074ac593bef574b6b2bdc8a5455f291636c3eec391d46158 for principal rick 2019-02-18 09:07:57,638 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving AuthenticationResult for flow authn/Password in session 7a4b4323f16bf9ca074ac593bef574b6b2bdc8a5455f291636c3eec391d46158 2019-02-18 09:07:57,640 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:?] - Template text (uid=$resolutionContext.principal) yields (uid=rick) 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter' Beginning process of filtering the following 7 attributes: [uid, telephoneNumber, Identifier, mail, surname, displayName, givenName] 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'uid' remained after filtering 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': no policy permitted release of attribute telephoneNumber values 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'Identifier' remained after filtering 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'mail' remained after filtering 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'surname' remained after filtering 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'displayName' remained after filtering 2019-02-18 09:07:57,641 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering 2019-02-18 09:07:57,642 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:07:57,642 - DEBUG [net.shibboleth.idp.consent.flow.impl.InitializeConsentContext:?] - Profile Action InitializeConsentContext: Created consent context 'ConsentContext{previousConsents={}, chosenConsents={}}' 2019-02-18 09:07:57,642 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action PopulateAttributeReleaseContext: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@5b94befd' 2019-02-18 09:07:57,642 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.PopulateAttributeReleaseContext:?] - Profile Action PopulateAttributeReleaseContext: Consentable attributes '{Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}}' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:eplapps-dev' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:eplapps-dev' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'rick:eplapps-dev' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'rick' 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:?] - Profile Action PopulateConsentContext: Populating consents: [Identifier, displayName, givenName, mail, surname, uid] 2019-02-18 09:07:57,643 - DEBUG [net.shibboleth.idp.consent.logic.impl.IsConsentRequiredPredicate:?] - Consent is required, no previous consents 2019-02-18 09:07:57,829 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Not a usual scheme, returning name of 'eplapps-dev' 2019-02-18 09:07:57,829 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No description matching the languages found, returning null 2019-02-18 09:07:57,829 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or InformationURLs returning null 2019-02-18 09:07:57,829 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or PrivacyStatementURLs returning null 2019-02-18 09:07:57,829 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:07:57,829 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No Organization, OrganizationName or names, returning null 2019-02-18 09:07:59,729 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Extracted consent ids '[Identifier, displayName, givenName, mail, surname, uid]' from request parameter '_shib_idp_consentIds' 2019-02-18 09:07:59,729 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Consent context 'ConsentContext{previousConsents={}, chosenConsents={Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}}' 2019-02-18 09:07:59,729 - INFO [Shibboleth-Consent-Audit.SSO:?] - 20190218T090759Z|eplapps-dev|AttributeReleaseConsent|rick|Identifier,displayName,givenName,mail,surname,uid||true,true,true,true,true,true 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:eplapps-dev' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:_key_idx' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.storage.impl.ConsentSerializer:?] - Serialized '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' as '[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}]' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.CreateResult:?] - Profile Action CreateResult: Created consent result 'ConsentResult{id=null, context=intercept/attribute-release, key=rick:eplapps-dev, value=[{"id":"Identifier"},{"id":201},{"id":117},{"id":"mail"},{"id":106},{"id":"uid"}], expiration=1582016879730}' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:_key_idx' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Will not prune storage records, number of keys '0' is less than max number of records '10' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:_key_idx' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.AbstractConsentIndexedStorageAction:?] - Profile Action CreateResult: Creating storage index with key 'rick:eplapps-dev' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.storage.impl.CollectionSerializer:?] - Serialized '[rick:eplapps-dev]' as '["rick:eplapps-dev"]' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action ReleaseAttributes: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@5b94befd' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Consents '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attributes before release '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}}' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}' will be released because consent is approved 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}' will be released because consent is approved 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}' will be released because consent is approved 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}' will be released because consent is approved 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}' will be released because consent is approved 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}' will be released because consent is approved 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Releasing attributes '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}}' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Not releasing attributes '{}' 2019-02-18 09:07:59,730 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:07:59,731 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractResponseShellAction:?] - Profile Action AddStatusResponseShell: Setting Issuer to https://samltest.id/saml/idp 2019-02-18 09:07:59,732 - DEBUG [org.opensaml.saml.common.profile.impl.AddInResponseToToResponse:?] - Profile Action AddInResponseToToResponse: Attempting to add InResponseTo to outgoing Response 2019-02-18 09:07:59,733 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAuthenticationStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Attempting to add an AuthenticationStatement to outgoing Assertion 2019-02-18 09:07:59,733 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Created Assertion _c4323a7f4ae74d6a42139fd472d7204b 2019-02-18 09:07:59,733 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Added Assertion _c4323a7f4ae74d6a42139fd472d7204b to Response _31384f099f9ab55e2993b7e50b7b5790 2019-02-18 09:07:59,733 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAuthnStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Added AuthenticationStatement to Assertion _c4323a7f4ae74d6a42139fd472d7204b 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:?] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rick of attribute uid 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rsanchez@samltest.id of attribute Identifier 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rsanchez@samltest.id of attribute mail 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sanchez of attribute surname 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Rick Sanchez of attribute displayName 2019-02-18 09:07:59,734 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Rick of attribute givenName 2019-02-18 09:07:59,735 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion Subjects 2019-02-18 09:07:59,735 - DEBUG [org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] - Policy checking disabled for NameIDPolicy with Format urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified 2019-02-18 09:07:59,735 - WARN [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:74] - Ignoring NameIDFormat metadata that includes the 'unspecified' format 2019-02-18 09:07:59,736 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - Configuration specifies the following formats: [] 2019-02-18 09:07:59,736 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - No formats specified in configuration or in metadata, returning default 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Candidate NameID formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:transient] 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Trying to generate identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:?] - Generating NameID AAdzZWNyZXQx0k7LIHJCI9BHsfSANl9MKGVkdooScNrNNfneN6Ta5hFLVZPcgEJj0D4fWZYJJ/Y5FxFHYe4uEsv8DE2Yq7kLDCCUhO6EgLxNkC1pBbUo with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Successfully generated identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Successfully generated NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Added NameID to 1 assertion subject(s) 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Attempting to add SubjectConfirmation to assertions in outgoing Response 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Address to 172.31.25.18 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data InResponseTo to ONELOGIN_116c9fd7026609cc89613ad3b92dd5d7d1b68b7a 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Recipient to http://127.0.0.1:5000/auth/callback 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data NotOnOrAfter to 5 minutes from now 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Added SubjectConfirmation with method urn:oasis:names:tc:SAML:2.0:cm:bearer to 1 assertion(s) 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Attempting to add NotBefore condition to every Assertion in outgoing Response 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Added NotBefore condition to Assertion _c4323a7f4ae74d6a42139fd472d7204b 2019-02-18 09:07:59,736 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotBeforeConditionToAssertions: Assertion _c4323a7f4ae74d6a42139fd472d7204b did not already contain Conditions, one was added 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Attempting to add NotOnOrAfter condition to every Assertion in outgoing Response 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Added NotOnOrAfter condition, indicating an expiration of 2019-02-18T09:12:59.731Z, to Assertion _c4323a7f4ae74d6a42139fd472d7204b 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Assertion _c4323a7f4ae74d6a42139fd472d7204b already contained Conditions, nothing was done 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Attempting to add an AudienceRestrictionCondition to every Assertion in Response 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAudienceRestrictionToAssertions: Assertion _c4323a7f4ae74d6a42139fd472d7204b already contained Conditions, nothing was done 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding new AudienceRestriction 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding eplapps-dev as an Audience of the AudienceRestriction 2019-02-18 09:07:59,737 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Added AudienceRestrictionCondition to Assertion _c4323a7f4ae74d6a42139fd472d7204b 2019-02-18 09:07:59,740 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:?] - Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party eplapps-dev to existing session 7a4b4323f16bf9ca074ac593bef574b6b2bdc8a5455f291636c3eec391d46158 2019-02-18 09:07:59,740 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving SPSession for service eplapps-dev in session 7a4b4323f16bf9ca074ac593bef574b6b2bdc8a5455f291636c3eec391d46158 2019-02-18 09:07:59,740 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:?] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession' 2019-02-18 09:07:59,740 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Maintaining secondary index for service ID eplapps-dev and key AAdzZWNyZXQx0k7LIHJCI9BHsfSANl9MKGVkdooScNrNNfneN6Ta5hFLVZPcgEJj0D4fWZYJJ/Y5FxFHYe4uEsv8DE2Yq7kLDCCUhO6EgLxNkC1pBbUo 2019-02-18 09:07:59,741 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptNameIDs: No encryption parameters, nothing to do 2019-02-18 09:07:59,741 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptAttributes: No encryption parameters, nothing to do 2019-02-18 09:07:59,741 - DEBUG [org.opensaml.saml.common.profile.impl.SignAssertions:?] - Profile Action SignAssertions: Will not sign assertions because no security parameters context is available 2019-02-18 09:07:59,742 - DEBUG [PROTOCOL_MESSAGE:?] - Profile Action EncryptAssertions: Response before assertion encryption: https://samltest.id/saml/idp https://samltest.id/saml/idp AAdzZWNyZXQx0k7LIHJCI9BHsfSANl9MKGVkdooScNrNNfneN6Ta5hFLVZPcgEJj0D4fWZYJJ/Y5FxFHYe4uEsv8DE2Yq7kLDCCUhO6EgLxNkC1pBbUo eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport rick rsanchez@samltest.id rsanchez@samltest.id Sanchez Rick Sanchez Rick 2019-02-18 09:07:59,742 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Assertion before encryption: https://samltest.id/saml/idp AAdzZWNyZXQx0k7LIHJCI9BHsfSANl9MKGVkdooScNrNNfneN6Ta5hFLVZPcgEJj0D4fWZYJJ/Y5FxFHYe4uEsv8DE2Yq7kLDCCUhO6EgLxNkC1pBbUo eplapps-dev urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport rick rsanchez@samltest.id rsanchez@samltest.id Sanchez Rick Sanchez Rick 2019-02-18 09:07:59,742 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation 2019-02-18 09:07:59,742 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = AES/CBC/ISO10126Padding 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = ENCRYPT_MODE 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting element... 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Serialized octets: https://samltest.id/saml/idpAAdzZWNyZXQx0k7LIHJCI9BHsfSANl9MKGVkdooScNrNNfneN6Ta5hFLVZPcgEJj0D4fWZYJJ/Y5FxFHYe4uEsv8DE2Yq7kLDCCUhO6EgLxNkC1pBbUoeplapps-devurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransportrickrsanchez@samltest.idrsanchez@samltest.idSanchezRick SanchezRick 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipherUtil:?] - Saw non-AES-GCM mode block cipher, returning IvParameterSpec: http://www.w3.org/2001/04/xmlenc#aes128-cbc 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Expected cipher.outputSize = 2944 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Actual cipher.outputSize = 2944 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets: 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 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted octets length = 3948 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Getting XMLCipher with transformation and c14n algorithm 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Constructing XMLCipher... 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - JCE Algorithm = RSA/ECB/OAEPPadding 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Initializing XMLCipher... 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - opmode = WRAP_MODE 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypting key ... 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets: KZmXHuJjlqiPmGMYq7eqIkPLwiYjiD8Kfi44wU+ZhlLGPm/gFzovYcoWNLmdLxZrSoYp1qzmO/Nk/oRY56etNjUKtznter00bp9Tn9QsFsRW9S+Gpt9vdGGS314ON+ELgXko/Y1cHnL/grQhCrGvJOdCT+bmPcRVN72JQ3H9NtVg8RzkxHQe39uw+jJJ+LC90X48fk62csqzWGq3Uvvesswbyqb6Dg6g/NgozKH3LN/NXPYPwO2wvnOQlaImtfzp9ZN0jwY+ZyYl4hmk4bE2+H1FEC4N+7AQfyvpitXP8JyTsnYXtHXVft8FdeaUTGdCYL6rZepdQdAgVQIvcAT7dQ== 2019-02-18 09:07:59,743 - DEBUG [org.apache.xml.security.encryption.XMLCipher:?] - Encrypted key octets length = 344 2019-02-18 09:07:59,743 - DEBUG [org.opensaml.saml.saml2.encryption.Encrypter:?] - Placing EncryptedKey elements inline inside EncryptedData 2019-02-18 09:07:59,747 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler:?] - Adding destination to outbound SAML 2 protocol message: http://127.0.0.1:5000/auth/callback 2019-02-18 09:07:59,747 - DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler:?] - Message Handler: Checking outbound endpoint for allowed URL scheme: http://127.0.0.1:5000/auth/callback 2019-02-18 09:07:59,747 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_31384f099f9ab55e2993b7e50b7b5790" 2019-02-18 09:07:59,747 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _31384f099f9ab55e2993b7e50b7b5790 and Element was [saml2p:Response: null] 2019-02-18 09:07:59,747 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_31384f099f9ab55e2993b7e50b7b5790" 2019-02-18 09:07:59,747 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _31384f099f9ab55e2993b7e50b7b5790 and Element was [saml2p:Response: null] 2019-02-18 09:07:59,748 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:07:59,748 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://samltest.id/saml/idpMIIDZTCCAk2gAwIBAgIUFIetDRTHLiBz9mIhkQ7cFau92ykwDQYJKoZIhvcNAQELBQAwQjELMAkG A1UEBhMCQkUxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55 IEx0ZDAeFw0xOTAxMjExMzI4NThaFw0yOTAxMTgxMzI4NThaMEIxCzAJBgNVBAYTAkJFMRUwEwYD VQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXG36Nl8QSimoe8N/YFr53ncWeKIMNj1bUXJA5ist7sog 9t1FanSpcqUtVwF06F9uEWSvMzEpdDjHo+BC3sYcWpNFikvWZndlKIs86awf9QK0WBGWy7RtFyVA rACEb6wid/qJ/CdfwfK/k1a0hxaLopad4a8dwFfzQWhZ8UtlHBkCCN0YskviYVoFDxiE0LUXmaEW WJaz5Ke4bQXmsxC/J4D4lM81Um/sKco0Sg+Fcclj7+4dIsX8FDhLsMkV5kmZGjiUjaDm9l713uF0 h9KBIFhsWFgsW88B2pHbdkPgzzGtSqf+0EbctoQXRy5NJgNZN6Z/H+W5515uqTMF/2AbAgMBAAGj UzBRMB0GA1UdDgQWBBQO6V7LGs5yEB0ZSs/WZwXlQuKQeDAfBgNVHSMEGDAWgBQO6V7LGs5yEB0Z Ss/WZwXlQuKQeDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAXERF9GjTgkz8/ RMEK2HzYUcfbc+9Tim/QgyQdIxhRTboG4wZ0QMTxuFJRvx7LhL61bEhjJzARVEQFaPoZP8qDY47u eNKEHfjpqrKEflAxjEQwy7rs7xL3gZUP8n6An/xz/6FsMKdczG//6hm23NVwS0bPIRW2MOqJ4JFZ NylepHyRtQF5WtnyHf7DWruP8AMXyMt+E+kxWjzGygU4GDn/asAbhNDHsQPmbWJHTOmGJ3CUxA38 DsJ4cj7Sxem06h4NBet0TOe8N/Jcf59RXgALJo5rmDj+CRqj79d5uecrWacO9t3bhpa+BVl4p+EM XuLDCWjzBFnVvDlC3mqHZY0KKZmXHuJjlqiPmGMYq7eqIkPLwiYjiD8Kfi44wU+ZhlLGPm/gFzovYcoWNLmdLxZrSoYp1qzmO/Nk/oRY56etNjUKtznter00bp9Tn9QsFsRW9S+Gpt9vdGGS314ON+ELgXko/Y1cHnL/grQhCrGvJOdCT+bmPcRVN72JQ3H9NtVg8RzkxHQe39uw+jJJ+LC90X48fk62csqzWGq3Uvvesswbyqb6Dg6g/NgozKH3LN/NXPYPwO2wvnOQlaImtfzp9ZN0jwY+ZyYl4hmk4bE2+H1FEC4N+7AQfyvpitXP8JyTsnYXtHXVft8FdeaUTGdCYL6rZepdQdAgVQIvcAT7dQ==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 2019-02-18 09:07:59,748 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:07:59,748 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - M7XjxYWSGiBPvRMmwHIlIwNVbZAcdxjA0Y3bbrRyALo= 2019-02-18 09:07:59,751 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:?] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:07:59,751 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Invoking Velocity template to create POST body 2019-02-18 09:07:59,751 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Encoding action url of 'http://127.0.0.1:5000/auth/callback' with encoded value 'http://127.0.0.1:5000/auth/callback' 2019-02-18 09:07:59,751 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Marshalling and Base64 encoding SAML message 2019-02-18 09:07:59,753 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Setting RelayState parameter to: 'http://127.0.0.1:5000/', encoded as 'http://127.0.0.1:5000/' 2019-02-18 09:07:59,755 - DEBUG [PROTOCOL_MESSAGE:?] - https://samltest.id/saml/idp M7XjxYWSGiBPvRMmwHIlIwNVbZAcdxjA0Y3bbrRyALo= VucITPj6xZArfSSOtRBaJCk4YeCJtQTfywQFDcnpUfFqj6ng03kpyOmWH+H9JwaD5sqMf9qPBMAgdQuseXGLusHs+2WjXaJ49ChNE+SL2k4wbkPgj75zpa0JgIN/JhX56XrrC6luFtO8HmlSreCh13Xe+UV82NuUgMfyJx4RQzeK6USsSYW2DzPPT73gsU7wni2Xok4eD7mYFl1Wo7p0OHRDpeVdN3ZOK5Um1KIt1L0yKi207OngJE/hxz7+FxHHz4MB7WX3mBcd7VAwVfmv52pULAee9dJocE5Sl8E/3z2i8LuLspoOHX4dCh9YXAVaS9qQeTZokld8vTPDpgo7KA== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== MIIDZTCCAk2gAwIBAgIUFIetDRTHLiBz9mIhkQ7cFau92ykwDQYJKoZIhvcNAQELBQAwQjELMAkG A1UEBhMCQkUxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55 IEx0ZDAeFw0xOTAxMjExMzI4NThaFw0yOTAxMTgxMzI4NThaMEIxCzAJBgNVBAYTAkJFMRUwEwYD VQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXG36Nl8QSimoe8N/YFr53ncWeKIMNj1bUXJA5ist7sog 9t1FanSpcqUtVwF06F9uEWSvMzEpdDjHo+BC3sYcWpNFikvWZndlKIs86awf9QK0WBGWy7RtFyVA rACEb6wid/qJ/CdfwfK/k1a0hxaLopad4a8dwFfzQWhZ8UtlHBkCCN0YskviYVoFDxiE0LUXmaEW WJaz5Ke4bQXmsxC/J4D4lM81Um/sKco0Sg+Fcclj7+4dIsX8FDhLsMkV5kmZGjiUjaDm9l713uF0 h9KBIFhsWFgsW88B2pHbdkPgzzGtSqf+0EbctoQXRy5NJgNZN6Z/H+W5515uqTMF/2AbAgMBAAGj UzBRMB0GA1UdDgQWBBQO6V7LGs5yEB0ZSs/WZwXlQuKQeDAfBgNVHSMEGDAWgBQO6V7LGs5yEB0Z Ss/WZwXlQuKQeDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAXERF9GjTgkz8/ RMEK2HzYUcfbc+9Tim/QgyQdIxhRTboG4wZ0QMTxuFJRvx7LhL61bEhjJzARVEQFaPoZP8qDY47u eNKEHfjpqrKEflAxjEQwy7rs7xL3gZUP8n6An/xz/6FsMKdczG//6hm23NVwS0bPIRW2MOqJ4JFZ NylepHyRtQF5WtnyHf7DWruP8AMXyMt+E+kxWjzGygU4GDn/asAbhNDHsQPmbWJHTOmGJ3CUxA38 DsJ4cj7Sxem06h4NBet0TOe8N/Jcf59RXgALJo5rmDj+CRqj79d5uecrWacO9t3bhpa+BVl4p+EM XuLDCWjzBFnVvDlC3mqHZY0K KZmXHuJjlqiPmGMYq7eqIkPLwiYjiD8Kfi44wU+ZhlLGPm/gFzovYcoWNLmdLxZrSoYp1qzmO/Nk/oRY56etNjUKtznter00bp9Tn9QsFsRW9S+Gpt9vdGGS314ON+ELgXko/Y1cHnL/grQhCrGvJOdCT+bmPcRVN72JQ3H9NtVg8RzkxHQe39uw+jJJ+LC90X48fk62csqzWGq3Uvvesswbyqb6Dg6g/NgozKH3LN/NXPYPwO2wvnOQlaImtfzp9ZN0jwY+ZyYl4hmk4bE2+H1FEC4N+7AQfyvpitXP8JyTsnYXtHXVft8FdeaUTGdCYL6rZepdQdAgVQIvcAT7dQ== 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 2019-02-18 09:07:59,755 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:?] - Profile Action RecordResponseComplete: Record response complete 2019-02-18 09:07:59,755 - INFO [Shibboleth-Audit.SSO:?] - 20190218T090759Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|ONELOGIN_116c9fd7026609cc89613ad3b92dd5d7d1b68b7a|eplapps-dev|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://samltest.id/saml/idp|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_31384f099f9ab55e2993b7e50b7b5790|rick|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,Identifier,mail,surname,displayName,givenName|AAdzZWNyZXQx0k7LIHJCI9BHsfSANl9MKGVkdooScNrNNfneN6Ta5hFLVZPcgEJj0D4fWZYJJ/Y5FxFHYe4uEsv8DE2Yq7kLDCCUhO6EgLxNkC1pBbUo|_c4323a7f4ae74d6a42139fd472d7204b| 2019-02-18 09:19:50,620 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded RelayState: ss:mem:63a4342000de04e999db6cc2a50fe55c7a8ecd933e48f321e6dc7f5b03581a88 2019-02-18 09:19:50,620 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Base64 decoding and inflating SAML message 2019-02-18 09:19:50,620 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:?] - Decoded SAML message 2019-02-18 09:19:50,621 - DEBUG [PROTOCOL_MESSAGE:?] - http://185.155.131.187/shibboleth 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:?] - Metadata Resolver FilesystemMetadataResolver SAMLtest: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=http://185.155.131.187/shibboleth] 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 source EntityDescriptors 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - Attempting to filter candidate RoleDescriptors via resolved Predicates 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:?] - After predicate filtering 1 RoleDescriptors remain 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:?] - Message Handler: org.opensaml.saml.common.messaging.context.SAMLMetadataContext added to MessageContext as child of org.opensaml.saml.common.messaging.context.SAMLPeerEntityContext 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: Selecting default AttributeConsumingService, if any 2019-02-18 09:19:50,632 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:?] - Message Handler: No AttributeConsumingService selected 2019-02-18 09:19:50,632 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:?] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer http://185.155.131.187/shibboleth 2019-02-18 09:19:50,633 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:19:50,633 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Checking SAML message intended destination endpoint against receiver endpoint 2019-02-18 09:19:50,633 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Intended message destination endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:19:50,633 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: Actual message receiver endpoint: https://samltest.id/idp/profile/SAML2/Redirect/SSO 2019-02-18 09:19:50,633 - DEBUG [org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:?] - Message Handler: SAML message intended destination endpoint matched recipient endpoint 2019-02-18 09:19:50,634 - DEBUG [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:?] - Message Handler: Evaluating message replay for message ID '_6e8e2ce0bd769b7db9b808172713aec9', issue instant '2019-02-18T09:19:49.000Z', entityID 'http://185.155.131.187/shibboleth' 2019-02-18 09:19:50,634 - DEBUG [org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler:?] - SPSSODescriptor for entity ID 'http://185.155.131.187/shibboleth' does not require AuthnRequests to be signed 2019-02-18 09:19:50,634 - DEBUG [org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:?] - Message Handler: SAML protocol message was not signed, skipping XML signature processing 2019-02-18 09:19:50,634 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler 2019-02-18 09:19:50,634 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: HTTP request was not signed via simple signature mechanism, skipping 2019-02-18 09:19:50,635 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Evaluating simple signature rule of type: org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler 2019-02-18 09:19:50,635 - DEBUG [org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:?] - Message Handler: Handler can not handle this request, skipping 2019-02-18 09:19:50,635 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:19:50,635 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:?] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context 2019-02-18 09:19:50,635 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Attempting to resolve endpoint of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService for outbound message 2019-02-18 09:19:50,636 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest 2019-02-18 09:19:50,636 - DEBUG [org.opensaml.saml.common.binding.AbstractEndpointResolver:?] - Endpoint Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Returning 6 candidate endpoints of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService 2019-02-18 09:19:50,636 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:?] - Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location http://185.155.131.187/Shibboleth.sso/SAML2/POST using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:19:50,636 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was resolved, won't be able to determine delegation requested status via metadata 2019-02-18 09:19:50,636 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - No AttributeConsumingService was available 2019-02-18 09:19:50,636 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Delegation request was not explicitly indicated, using default value: NOT_REQUESTED 2019-02-18 09:19:50,636 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:?] - Issuance of a delegated Assertion is not in effect, skipping further processing 2019-02-18 09:19:50,636 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing enabled 2019-02-18 09:19:50,636 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataSignatureSigningParametersResolver:?] - Resolved signature algorithm URI from SAML metadata SigningMethod: http://www.w3.org/2001/04/xmldsig-more#rsa-sha512 2019-02-18 09:19:50,636 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataSignatureSigningParametersResolver:?] - Resolved reference digest method algorithm URI from SAML metadata DigestMethod: http://www.w3.org/2001/04/xmlenc#sha512 2019-02-18 09:19:50,637 - DEBUG [org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters:?] - Profile Action PopulateSignatureSigningParameters: Signing not enabled 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Encryption for assertions (true), identifiers (false), attributes(false) 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolving EncryptionParameters for request 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding entityID to resolution criteria 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Adding role metadata to resolution criteria 2019-02-18 09:19:50,637 - DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver:?] - Resolving credentials from supplied RoleDescriptor using usage: ENCRYPTION. Effective entityID was: http://185.155.131.187/shibboleth 2019-02-18 09:19:50,637 - DEBUG [org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver:?] - Could not resolve encryption parameters based on SAML metadata, falling back to locally configured credentials and algorithms 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Failed to resolve EncryptionParameters 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Resolver returned no EncryptionParameters 2019-02-18 09:19:50,637 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:?] - Profile Action PopulateEncryptionParameters: Encryption is optional, ignoring inability to encrypt 2019-02-18 09:19:50,640 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:?] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing 2019-02-18 09:19:50,641 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeAuthenticationContext:?] - Profile Action InitializeAuthenticationContext: Created authentication context: AuthenticationContext{initiationInstant=2019-02-18T09:19:50.641Z, isPassive=false, forceAuthn=false, hintedName=null, maxAge=0, potentialFlows=[], activeResults=[], attemptedFlow=null, signaledFlowId=null, authenticationStateMap={}, resultCacheable=true, initialAuthenticationResult=null, authenticationResult=null, completionInstant=1970-01-01T00:00:00.000Z} 2019-02-18 09:19:50,641 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.ProcessRequestedAuthnContext:?] - Profile Action ProcessRequestedAuthnContext: AuthnRequest did not contain a RequestedAuthnContext, nothing to do 2019-02-18 09:19:50,641 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:?] - Profile Action PopulateAuthenticationContext: Installed 1 potential authentication flows into AuthenticationContext 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Performing primary lookup on session ID 4c047323a0d7b57912d486c3bab5e4143e4144d20f8431b60789980f3b87e6e3 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Primary lookup failed for session ID 4c047323a0d7b57912d486c3bab5e4143e4144d20f8431b60789980f3b87e6e3 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.session.impl.PopulateSessionContext:?] - Profile Action PopulateSessionContext: No session found for client 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.InitializeRequestedPrincipalContext:?] - Profile Action InitializeRequestedPrincipalContext: Profile configuration did not supply any default authentication methods 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:?] - Profile Action FilterFlowsByForcedAuthn: Request does not have forced authentication requirement, nothing to do 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: No specific Principals requested 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: No usable active results available, selecting an inactive flow 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:?] - Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/Password 2019-02-18 09:19:50,642 - DEBUG [net.shibboleth.idp.authn.impl.ExtractUsernamePasswordFromBasicAuth:?] - Profile Action ExtractUsernamePasswordFromBasicAuth: No appropriate Authorization header found 2019-02-18 09:19:50,847 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Returning name from UIInfo 'Phantominds' 2019-02-18 09:19:50,847 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:22:47,790 - DEBUG [net.shibboleth.idp.authn.AbstractExtractionAction:?] - Profile Action ExtractUsernamePasswordFromFormRequest: Trimming whitespace of input string 'rick' 2019-02-18 09:22:47,791 - DEBUG [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Attempting to authenticate user rick 2019-02-18 09:22:47,791 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolve user=[org.ldaptive.auth.User@1068637948::identifier=rick, context=org.apache.velocity.VelocityContext@7532d545] 2019-02-18 09:22:47,797 - DEBUG [net.shibboleth.idp.authn.PooledTemplateSearchDnResolver:?] - resolved dn=uid=rick,ou=People,dc=samltest,dc=id for user=[org.ldaptive.auth.User@1068637948::identifier=rick, context=org.apache.velocity.VelocityContext@7532d545] 2019-02-18 09:22:47,798 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'rick' succeeded 2019-02-18 09:22:47,798 - DEBUG [net.shibboleth.idp.authn.AbstractValidationAction:?] - Profile Action ValidateUsernamePasswordAgainstLDAP: Adding custom Principal(s) defined on underlying flow descriptor 2019-02-18 09:22:47,798 - DEBUG [net.shibboleth.idp.authn.impl.PopulateSubjectCanonicalizationContext:?] - Profile Action PopulateSubjectCanonicalizationContext: Installing 2 canonicalization flows into SubjectCanonicalizationContext 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/x500 for applicability... 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Canonicalization flow c14n/x500 was not applicable to this request 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Checking canonicalization flow c14n/simple for applicability... 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.impl.SelectSubjectCanonicalizationFlow:?] - Profile Action SelectSubjectCanonicalizationFlow: Selecting canonicalization flow c14n/simple 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.AbstractSubjectCanonicalizationAction:?] - Profile Action SimpleSubjectCanonicalization: trimming whitespace of input string 'rick' 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.session.impl.DetectIdentitySwitch:?] - Profile Action DetectIdentitySwitch: No previous session found, nothing to do 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Canonical principal name was established as 'rick' 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.authn.impl.FinalizeAuthentication:?] - Profile Action FinalizeAuthentication: Request did not have explicit authentication requirements, result is accepted 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:?] - Profile Action UpdateSessionWithAuthenticationResult: Creating new session for principal rick 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Created new session a9d0b39f8236c6b29510e50e45a99e9650397c8b855f1a29551135186fd4bb94 for principal rick 2019-02-18 09:22:47,799 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving AuthenticationResult for flow authn/Password in session a9d0b39f8236c6b29510e50e45a99e9650397c8b855f1a29551135186fd4bb94 2019-02-18 09:22:47,801 - DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.TemplatedExecutableSearchFilterBuilder:?] - Template text (uid=$resolutionContext.principal) yields (uid=rick) 2019-02-18 09:22:47,808 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter' Beginning process of filtering the following 7 attributes: [uid, telephoneNumber, Identifier, mail, surname, displayName, givenName] 2019-02-18 09:22:47,808 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'uid' remained after filtering 2019-02-18 09:22:47,808 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': no policy permitted release of attribute telephoneNumber values 2019-02-18 09:22:47,808 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'Identifier' remained after filtering 2019-02-18 09:22:47,809 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'mail' remained after filtering 2019-02-18 09:22:47,809 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'surname' remained after filtering 2019-02-18 09:22:47,809 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'displayName' remained after filtering 2019-02-18 09:22:47,809 - DEBUG [net.shibboleth.idp.attribute.filter.impl.AttributeFilterImpl:?] - Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering 2019-02-18 09:22:47,810 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.flow.impl.InitializeConsentContext:?] - Profile Action InitializeConsentContext: Created consent context 'ConsentContext{previousConsents={}, chosenConsents={}}' 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action PopulateAttributeReleaseContext: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@44b3ee2c' 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.PopulateAttributeReleaseContext:?] - Profile Action PopulateAttributeReleaseContext: Consentable attributes '{Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}}' 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.logic.impl.JoinFunction:?] - Result 'rick:http://185.155.131.187/shibboleth' 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick:http://185.155.131.187/shibboleth' 2019-02-18 09:22:47,811 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'rick:http://185.155.131.187/shibboleth' 2019-02-18 09:22:47,812 - DEBUG [net.shibboleth.idp.consent.logic.impl.FlowIdLookupFunction:?] - Current flow id is 'intercept/attribute-release' 2019-02-18 09:22:47,812 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: Read storage record 'null' with context 'intercept/attribute-release' and key 'rick' 2019-02-18 09:22:47,812 - DEBUG [net.shibboleth.idp.consent.flow.storage.impl.ReadConsentFromStorage:?] - Profile Action ReadConsentFromStorage: No storage record for context 'intercept/attribute-release' and key 'rick' 2019-02-18 09:22:47,812 - DEBUG [net.shibboleth.idp.consent.flow.impl.PopulateConsentContext:?] - Profile Action PopulateConsentContext: Populating consents: [Identifier, displayName, givenName, mail, surname, uid] 2019-02-18 09:22:47,812 - DEBUG [net.shibboleth.idp.consent.logic.impl.IsConsentRequiredPredicate:?] - Consent is required, no previous consents 2019-02-18 09:22:48,027 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Returning name from UIInfo 'Phantominds' 2019-02-18 09:22:48,027 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Returning InformationURL, https://www.phantominds.com 2019-02-18 09:22:48,027 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Acceptable Scheme 'https', returning value 'https://www.phantominds.com' 2019-02-18 09:22:48,027 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or PrivacyStatementURLs returning null 2019-02-18 09:22:48,027 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - No UIInfo or logos returning null 2019-02-18 09:22:48,027 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:?] - Returning OrganizationName from Organization, Phantominds 2019-02-18 09:22:51,486 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Extracted consent ids '[Identifier, displayName, givenName, mail, surname, uid]' from request parameter '_shib_idp_consentIds' 2019-02-18 09:22:51,486 - DEBUG [net.shibboleth.idp.consent.flow.impl.ExtractConsent:?] - Profile Action ExtractConsent: Consent context 'ConsentContext{previousConsents={}, chosenConsents={Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}}' 2019-02-18 09:22:51,487 - INFO [Shibboleth-Consent-Audit.SSO:?] - 20190218T092251Z|http://185.155.131.187/shibboleth|AttributeReleaseConsent|rick|Identifier,displayName,givenName,mail,surname,uid||true,true,true,true,true,true 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.AbstractAttributeReleaseAction:?] - Profile Action ReleaseAttributes: Found attributeContext 'net.shibboleth.idp.attribute.context.AttributeContext@44b3ee2c' 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Consents '{Identifier=Consent{id=Identifier, value=null, isApproved=true}, displayName=Consent{id=displayName, value=null, isApproved=true}, givenName=Consent{id=givenName, value=null, isApproved=true}, mail=Consent{id=mail, value=null, isApproved=true}, surname=Consent{id=surname, value=null, isApproved=true}, uid=Consent{id=uid, value=null, isApproved=true}}' 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attributes before release '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}}' 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}' will be released because consent is approved 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}' will be released because consent is approved 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}' will be released because consent is approved 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}' will be released because consent is approved 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}' will be released because consent is approved 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Attribute 'IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}' will be released because consent is approved 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Releasing attributes '{uid=IdPAttribute{id=uid, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7aa53, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@e73c8147], values=[StringAttributeValue{value=rick}]}, Identifier=IdPAttribute{id=Identifier, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@69feb3c4], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, mail=IdPAttribute{id=mail, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@7af7b1d5, net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@61ffc98a], values=[StringAttributeValue{value=rsanchez@samltest.id}]}, surname=IdPAttribute{id=surname, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@35663cae, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@d164538a], values=[StringAttributeValue{value=Sanchez}]}, displayName=IdPAttribute{id=displayName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@fd638e24, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@5a2b68b3], values=[StringAttributeValue{value=Rick Sanchez}]}, givenName=IdPAttribute{id=givenName, displayNames={}, displayDescriptions={}, encoders=[net.shibboleth.idp.saml.attribute.encoding.impl.SAML1StringAttributeEncoder@552e411f, net.shibboleth.idp.saml.attribute.encoding.impl.SAML2StringAttributeEncoder@27f9d24], values=[StringAttributeValue{value=Rick}]}}' 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.consent.flow.ar.impl.ReleaseAttributes:?] - Profile Action ReleaseAttributes: Not releasing attributes '{}' 2019-02-18 09:22:51,487 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:?] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do 2019-02-18 09:22:51,488 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractResponseShellAction:?] - Profile Action AddStatusResponseShell: Setting Issuer to https://samltest.id/saml/idp 2019-02-18 09:22:51,494 - DEBUG [org.opensaml.saml.common.profile.impl.AddInResponseToToResponse:?] - Profile Action AddInResponseToToResponse: Attempting to add InResponseTo to outgoing Response 2019-02-18 09:22:51,495 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAuthenticationStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Attempting to add an AuthenticationStatement to outgoing Assertion 2019-02-18 09:22:51,495 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Created Assertion _0c90026ecf169abfb31b090fb805a163 2019-02-18 09:22:51,495 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAuthnStatementToAssertion: Added Assertion _0c90026ecf169abfb31b090fb805a163 to Response _a50c3c17f979c07cf031a69568922a9a 2019-02-18 09:22:51,495 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.AddAuthnStatementToAssertion:?] - Profile Action AddAuthnStatementToAssertion: Added AuthenticationStatement to Assertion _0c90026ecf169abfb31b090fb805a163 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.profile.impl.BaseAddAttributeStatementToAssertion:?] - Profile Action AddAttributeStatementToAssertion: Attempting to add an AttributeStatement to outgoing Assertion 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rick of attribute uid 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rsanchez@samltest.id of attribute Identifier 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value rsanchez@samltest.id of attribute mail 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Sanchez of attribute surname 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Rick Sanchez of attribute displayName 2019-02-18 09:22:51,496 - DEBUG [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:?] - Encoding value Rick of attribute givenName 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Attempting to add NameID to outgoing Assertion Subjects 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.common.profile.logic.AbstractNameIDPolicyPredicate:?] - Policy checking disabled for NameIDPolicy with Format urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:?] - Metadata specifies the following formats: [] 2019-02-18 09:22:51,498 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - Configuration specifies the following formats: [] 2019-02-18 09:22:51,498 - DEBUG [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:?] - No formats specified in configuration or in metadata, returning default 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Candidate NameID formats: [urn:oasis:names:tc:SAML:2.0:nameid-format:transient] 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Trying to generate NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Trying to generate identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.AbstractSAML2NameIDGenerator:?] - Generating NameID AAdzZWNyZXQxGC2LCe2apBSobySzyo5737Q4bRba1ROJKU3xwkmxwZzPCiRZgT4Jd8+bkiYmPI5VMHV39tdCuupgiB7dA16O2nzfQ1Beigxz0tB0vgsJBstbhazO03wCDgHjyBuxxEIuMlE= with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.common.profile.impl.ChainingNameIdentifierGenerator:?] - Successfully generated identifier with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Successfully generated NameID with Format urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:?] - Profile Action AddNameIDToSubjects: Added NameID to 1 assertion subject(s) 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Attempting to add SubjectConfirmation to assertions in outgoing Response 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Address to 172.31.33.243 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data InResponseTo to _6e8e2ce0bd769b7db9b808172713aec9 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data Recipient to http://185.155.131.187/Shibboleth.sso/SAML2/POST 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Setting confirmation data NotOnOrAfter to 5 minutes from now 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.impl.AddSubjectConfirmationToSubjects:?] - Profile Action AddSubjectConfirmationToSubjects: Added SubjectConfirmation with method urn:oasis:names:tc:SAML:2.0:cm:bearer to 1 assertion(s) 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Attempting to add NotBefore condition to every Assertion in outgoing Response 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotBeforeConditionToAssertions:?] - Profile Action AddNotBeforeConditionToAssertions: Added NotBefore condition to Assertion _0c90026ecf169abfb31b090fb805a163 2019-02-18 09:22:51,498 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotBeforeConditionToAssertions: Assertion _0c90026ecf169abfb31b090fb805a163 did not already contain Conditions, one was added 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Attempting to add NotOnOrAfter condition to every Assertion in outgoing Response 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.common.profile.impl.AddNotOnOrAfterConditionToAssertions:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Added NotOnOrAfter condition, indicating an expiration of 2019-02-18T09:27:51.488Z, to Assertion _0c90026ecf169abfb31b090fb805a163 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddNotOnOrAfterConditionToAssertions: Assertion _0c90026ecf169abfb31b090fb805a163 already contained Conditions, nothing was done 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Attempting to add an AudienceRestrictionCondition to every Assertion in Response 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.saml2.profile.SAML2ActionSupport:?] - Profile Action AddAudienceRestrictionToAssertions: Assertion _0c90026ecf169abfb31b090fb805a163 already contained Conditions, nothing was done 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding new AudienceRestriction 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Adding http://185.155.131.187/shibboleth as an Audience of the AudienceRestriction 2019-02-18 09:22:51,499 - DEBUG [org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions:?] - Profile Action AddAudienceRestrictionToAssertions: Added AudienceRestrictionCondition to Assertion _0c90026ecf169abfb31b090fb805a163 2019-02-18 09:22:51,501 - DEBUG [net.shibboleth.idp.session.impl.UpdateSessionWithSPSession:?] - Profile Action UpdateSessionWithSPSession: Adding new SPSession for relying party http://185.155.131.187/shibboleth to existing session a9d0b39f8236c6b29510e50e45a99e9650397c8b855f1a29551135186fd4bb94 2019-02-18 09:22:51,501 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:?] - Saving SPSession for service http://185.155.131.187/shibboleth in session a9d0b39f8236c6b29510e50e45a99e9650397c8b855f1a29551135186fd4bb94 2019-02-18 09:22:51,501 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:?] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession' 2019-02-18 09:22:51,501 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:?] - Maintaining secondary index for service ID http://185.155.131.187/shibboleth and key AAdzZWNyZXQxGC2LCe2apBSobySzyo5737Q4bRba1ROJKU3xwkmxwZzPCiRZgT4Jd8+bkiYmPI5VMHV39tdCuupgiB7dA16O2nzfQ1Beigxz0tB0vgsJBstbhazO03wCDgHjyBuxxEIuMlE= 2019-02-18 09:22:51,502 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptNameIDs: No encryption parameters, nothing to do 2019-02-18 09:22:51,502 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptAttributes: No encryption parameters, nothing to do 2019-02-18 09:22:51,502 - DEBUG [org.opensaml.saml.common.profile.impl.SignAssertions:?] - Profile Action SignAssertions: Will not sign assertions because no security parameters context is available 2019-02-18 09:22:51,502 - DEBUG [org.opensaml.saml.saml2.profile.impl.AbstractEncryptAction:?] - Profile Action EncryptAssertions: No encryption parameters, nothing to do 2019-02-18 09:22:51,504 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler:?] - Adding destination to outbound SAML 2 protocol message: http://185.155.131.187/Shibboleth.sso/SAML2/POST 2019-02-18 09:22:51,504 - DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler:?] - Message Handler: Checking outbound endpoint for allowed URL scheme: http://185.155.131.187/Shibboleth.sso/SAML2/POST 2019-02-18 09:22:51,506 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_a50c3c17f979c07cf031a69568922a9a" 2019-02-18 09:22:51,506 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _a50c3c17f979c07cf031a69568922a9a and Element was [saml2p:Response: null] 2019-02-18 09:22:51,506 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - State I can resolve reference: "#_a50c3c17f979c07cf031a69568922a9a" 2019-02-18 09:22:51,506 - DEBUG [org.apache.xml.security.utils.resolver.implementations.ResolverFragment:?] - Try to catch an Element with ID _a50c3c17f979c07cf031a69568922a9a and Element was [saml2p:Response: null] 2019-02-18 09:22:51,506 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - Pre-digested input: 2019-02-18 09:22:51,506 - DEBUG [org.apache.xml.security.utils.DigesterOutputStream:?] - https://samltest.id/saml/idphttps://samltest.id/saml/idpAAdzZWNyZXQxGC2LCe2apBSobySzyo5737Q4bRba1ROJKU3xwkmxwZzPCiRZgT4Jd8+bkiYmPI5VMHV39tdCuupgiB7dA16O2nzfQ1Beigxz0tB0vgsJBstbhazO03wCDgHjyBuxxEIuMlE=http://185.155.131.187/shibbolethurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransportrickrsanchez@samltest.idrsanchez@samltest.idSanchezRick SanchezRick 2019-02-18 09:22:51,507 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - Canonicalized SignedInfo: 2019-02-18 09:22:51,507 - DEBUG [org.apache.xml.security.utils.SignerOutputStream:?] - 9k3HwqXbXlcLk/CpQNqh9RAEuWXg2EIsMiPEl4p0l3UQhvgpgjYKNCrlOViwAka04TrRHmgJxchsQvpYhNttFA== 2019-02-18 09:22:51,510 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:?] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 2019-02-18 09:22:51,510 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Invoking Velocity template to create POST body 2019-02-18 09:22:51,510 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Encoding action url of 'http://185.155.131.187/Shibboleth.sso/SAML2/POST' with encoded value 'http://185.155.131.187/Shibboleth.sso/SAML2/POST' 2019-02-18 09:22:51,510 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Marshalling and Base64 encoding SAML message 2019-02-18 09:22:51,510 - DEBUG [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:?] - Setting RelayState parameter to: 'ss:mem:63a4342000de04e999db6cc2a50fe55c7a8ecd933e48f321e6dc7f5b03581a88', encoded as 'ss:mem:63a4342000de04e999db6cc2a50fe55c7a8ecd933e48f321e6dc7f5b03581a88' 2019-02-18 09:22:51,513 - DEBUG [PROTOCOL_MESSAGE:?] - https://samltest.id/saml/idp 9k3HwqXbXlcLk/CpQNqh9RAEuWXg2EIsMiPEl4p0l3UQhvgpgjYKNCrlOViwAka04TrRHmgJxchsQvpYhNttFA== PTJRRIpao6a1rhmaEO72qyUFX7pOUxrZl2DzsxNplljD2cobh0C3dLg2hi+PcmEqkbFhcw+JlYGp6b9yRzW8T1+FFSrAu0ID/dyt5WzqR+4von1e36f41Tq4uw0ocyj+wto6mNd0ew5J4K3EhQWlR+FNGnDiTxlUycG73EaPCgVZn3/MSiviRhZbPfxG4mGTp61/ajg8KPBzhlDAMWPBcWDVpUM7/dXMECeeqnWLtQQSjE8iR+CvVohLwgEq7RBKdnowHCbaE+K67wF1qP2/ARH7iikKQHHWjISsYQjwtyWMn+wKcI2GfYs/wn+S1vTxe1MGkLNvGG9l9g/YGmOv5g== MIIDEjCCAfqgAwIBAgIVAMECQ1tjghafm5OxWDh9hwZfxthWMA0GCSqGSIb3DQEBCwUAMBYxFDAS BgNVBAMMC3NhbWx0ZXN0LmlkMB4XDTE4MDgyNDIxMTQwOVoXDTM4MDgyNDIxMTQwOVowFjEUMBIG A1UEAwwLc2FtbHRlc3QuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z4QX1NFK s71ufbQwoQoW7qkNAJRIANGA4iM0ThYghul3pC+FwrGv37aTxWXfA1UG9njKbbDreiDAZKngCgyj xj0uJ4lArgkr4AOEjj5zXA81uGHARfUBctvQcsZpBIxDOvUUImAl+3NqLgMGF2fktxMG7kX3GEVN c1klbN3dfYsaw5dUrw25DheL9np7G/+28GwHPvLb4aptOiONbCaVvh9UMHEA9F7c0zfF/cL5fOpd Va54wTI0u12CsFKt78h6lEGG5jUs/qX9clZncJM7EFkN3imPPy+0HC8nspXiH/MZW8o2cqWRkrw3 MzBZW3Ojk5nQj40V6NUbjb7kfejzAgMBAAGjVzBVMB0GA1UdDgQWBBQT6Y9J3Tw/hOGc8PNV7JEE 4k2ZNTA0BgNVHREELTArggtzYW1sdGVzdC5pZIYcaHR0cHM6Ly9zYW1sdGVzdC5pZC9zYW1sL2lk cDANBgkqhkiG9w0BAQsFAAOCAQEASk3guKfTkVhEaIVvxEPNR2w3vWt3fwmwJCccW98XXLWgNbu3 YaMb2RSn7Th4p3h+mfyk2don6au7Uyzc1Jd39RNv80TG5iQoxfCgphy1FYmmdaSfO8wvDtHTTNiL ArAxOYtzfYbzb5QrNNH/gQEN8RJaEf/g/1GTw9x/103dSMK0RXtl+fRs2nblD1JJKSQ3AdhxK/we P3aUPtLxVVJ9wMOQOfcy02l+hHMb6uAjsPOpOVKqi3M8XmcUZOpx4swtgGdeoSpeRyrtMvRwdcci NBp9UZome44qZAYH1iqrpmmjsfI9pJItsgWu3kXPjhSfj1AJGR1l9JGvJrHki1iHTA== https://samltest.id/saml/idp AAdzZWNyZXQxGC2LCe2apBSobySzyo5737Q4bRba1ROJKU3xwkmxwZzPCiRZgT4Jd8+bkiYmPI5VMHV39tdCuupgiB7dA16O2nzfQ1Beigxz0tB0vgsJBstbhazO03wCDgHjyBuxxEIuMlE= http://185.155.131.187/shibboleth urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport rick rsanchez@samltest.id rsanchez@samltest.id Sanchez Rick Sanchez Rick 2019-02-18 09:22:51,513 - DEBUG [net.shibboleth.idp.profile.impl.RecordResponseComplete:?] - Profile Action RecordResponseComplete: Record response complete 2019-02-18 09:22:51,514 - INFO [Shibboleth-Audit.SSO:?] - 20190218T092251Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_6e8e2ce0bd769b7db9b808172713aec9|http://185.155.131.187/shibboleth|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://samltest.id/saml/idp|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_a50c3c17f979c07cf031a69568922a9a|rick|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,Identifier,mail,surname,displayName,givenName|AAdzZWNyZXQxGC2LCe2apBSobySzyo5737Q4bRba1ROJKU3xwkmxwZzPCiRZgT4Jd8+bkiYmPI5VMHV39tdCuupgiB7dA16O2nzfQ1Beigxz0tB0vgsJBstbhazO03wCDgHjyBuxxEIuMlE=|_0c90026ecf169abfb31b090fb805a163|