2022-01-25 14:56:27 DEBUG Shibboleth.SSO.SAML2 [108807] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 14:56:27 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108807] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 14:56:27 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108807] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:56:27 DEBUG XMLTooling.StorageService [108807] [default]: inserted record (_4f74ed409dbfd28a1bc5895791139421) in context (MessageFlow) with expiration (1643122826)
2022-01-25 14:56:27 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108807] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:56:27 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108807] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 14:56:27 DEBUG Shibboleth.SSO.SAML2 [108807] [default]: SSO profile processing completed successfully
2022-01-25 14:56:27 DEBUG Shibboleth.SSO.SAML2 [108807] [default]: extracting pushed attributes...
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeExtractor.XML [108807] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeExtractor.XML [108807] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeExtractor.XML [108807] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeDecoder.String [108807] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeDecoder.String [108807] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeFilter [108807] [default]: filtering 2 attribute(s) from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeFilter [108807] [default]: applying filtering rule(s) for attribute (uid) from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:56:27 DEBUG Shibboleth.AttributeFilter [108807] [default]: applying filtering rule(s) for attribute (mail) from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:56:27 DEBUG Shibboleth.SessionCache [108807] [default]: creating new session
2022-01-25 14:56:27 DEBUG Shibboleth.SessionCache [108807] [default]: storing new session...
2022-01-25 14:56:27 DEBUG XMLTooling.StorageService [108807] [default]: inserted record (session) in context (_8241c08334503de090ba84fa847013ea) with expiration (1643126187)
2022-01-25 14:56:27 DEBUG XMLTooling.StorageService [108807] [default]: inserted record (AAdzZWNyZXQxBVrxd7olJHs4NC/VyH5Cl3tpHoAgfSZt0QDlU8/Q6fEqLHhhac0OUfct/MvY7ppZrac9o1fgxpWA2CGZBFpbnXXDYVimj30gnLfy7XGyKeuyJalKfpt0YdstUQI=) in context (NameID) with expiration (1643151387)
2022-01-25 14:56:27 INFO Shibboleth.SessionCache [108807] [default]: new session created: ID (_8241c08334503de090ba84fa847013ea) IdP (https://gluu5.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.22.242)
2022-01-25 14:56:27 DEBUG XMLTooling.StorageService [108807] [default]: deleted record (fb34b9c0d4cd1bb9a8982f9580165179dbcc3539e87cb6f0af641bc60818b405) in context (RelayState)
2022-01-25 14:56:27 DEBUG Shibboleth.SSO.SAML2 [108807] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 14:56:27 DEBUG Shibboleth.Listener [108807]: dispatching message (default::getHeaders::Application)
2022-01-25 14:56:27 DEBUG Shibboleth.Listener [108807] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 14:56:27 DEBUG XMLTooling.StorageService [108807] [default]: updated expiration of valid records in context (_8241c08334503de090ba84fa847013ea) to (1643126187)
2022-01-25 14:56:28 DEBUG Shibboleth.Listener [108807] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 14:56:28 DEBUG XMLTooling.StorageService [108807] [default]: updated expiration of valid records in context (_8241c08334503de090ba84fa847013ea) to (1643126188)
2022-01-25 14:57:06 DEBUG Shibboleth.Listener [108807] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108807] [default]: inserted record (f137c95579ee4db504d020a1542d4085c3dc73b81b139bce51a1d44ecefd6b01) in context (RelayState) with expiration (1643123226)
2022-01-25 14:57:06 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108807] [default]: validating input
2022-01-25 14:57:06 DEBUG OpenSAML.MessageEncoder.SAML2 [108807] [default]: tracking request (_835533b126d7be552edddbadc6a10191) against RelayState token (ss:mem:f137c95579ee4db504d020a1542d4085c3dc73b81b139bce51a1d44ecefd6b01)
2022-01-25 14:57:06 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108807] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 14:57:06 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108807] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://gluu5.pubsec.ukfast.team/idp/profile/SAML2/Redirect/SSO" ID="_835533b126d7be552edddbadc6a10191" IssueInstant="2022-01-25T14:57:06Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 14:57:06 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108807] [default]: message encoded, sending redirect to client
2022-01-25 14:57:06 DEBUG Shibboleth.Listener [108807] [default]: dispatching message (default/SAML2/POST)
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2POST [108807] [default]: validating input
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2POST [108807] [default]: decoded SAML message:
<samlp:Response Version="2.0" ID="WdE.F9GFn_joTYGizz13hFadI8y" IssueInstant="2022-01-25T14:57:04.962Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:saml2:gopalsecurityinnov8onmicrosoftcom</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#WdE.F9GFn_joTYGizz13hFadI8y"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>fFaTA2hz6xvUbzvD1elgPj018qfwrnUlIeADwWdQk64=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>XbCgyDm9sdDo5cLe0OYiLXsxvPNKESxa7r/DzhBhNdVqazgdl/P5F4EO+02qwRd+/UH0oyJLDHMOATAcVMeRRvp8ucBnNOYslWkYWAZUxopDeU1oQAkUTIEmBS1Xca3Ob2v1ubLAKfuozD9eUfJQ4hxbWnKnDFUHjOO/6xU0TyzWn7CHzIvfP79Ga1yuLJzEYRQM+HMPKaLZ79cEOth4vy2nuAUO+EuXNJe/vqj1VzcjoHTF+lMJu5b/ML0MUt+17WG+Rvp+3lyyNT3ysjXEpNPz7hzUspTI8XSHkbg0yjuVzfGHDheZxTisBDw8hSfIdBPto2RZlFC7kuNSsqpf2g==</ds:SignatureValue></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="TBSyEIEaJv89Yn.v5hgcHecfyNP" IssueInstant="2022-01-25T14:57:04.977Z" Version="2.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><saml:Issuer>urn:saml2:gopalsecurityinnov8onmicrosoftcom</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">7IerP0PqwsRTxbdHy8K-o29pmycMLZ69bkk8uETGAxQ</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST" NotOnOrAfter="2022-01-25T15:02:04.977Z"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2022-01-25T14:52:04.977Z" NotOnOrAfter="2022-01-25T15:02:04.977Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement SessionIndex="TBSyEIEaJv89Yn.v5hgcHecfyNP" AuthnInstant="2022-01-25T14:57:04.977Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Telephony</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108807] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108807] [default]: message from (urn:saml2:gopalsecurityinnov8onmicrosoftcom)
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108807] [default]: searching metadata for message issuer...
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108807] [default]: no RelayState, unable to search for request/response correlation cookie
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108807] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108807] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108807] [default]: inserted record (WdE.F9GFn_joTYGizz13hFadI8y) in context (MessageFlow) with expiration (1643122864)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108807] [default]: validating signature profile
2022-01-25 14:57:06 DEBUG XMLTooling.KeyInfoResolver.Inline [108807] [default]: resolving ds:X509Certificate
2022-01-25 14:57:06 DEBUG XMLTooling.KeyInfoResolver.Inline [108807] [default]: resolved 1 certificate(s)
2022-01-25 14:57:06 DEBUG XMLTooling.KeyInfoResolver.Inline [108807] [default]: resolved 0 CRL(s)
2022-01-25 14:57:06 WARN OpenSAML.SecurityPolicyRule.XMLSigning [108807] [default]: unable to verify message signature with supplied trust engine
2022-01-25 14:57:06 WARN Shibboleth.SSO.SAML2 [108807] [default]: error processing incoming assertion: Message was signed, but signature could not be verified.
2022-01-25 14:57:06 DEBUG Shibboleth.Listener [108808] [default]: dispatching message (default/SAML2/POST)
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2POST [108808] [default]: validating input
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2POST [108808] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_75f0d46ef1081c657cd41949148a872a" InResponseTo="_835533b126d7be552edddbadc6a10191" IssueInstant="2022-01-25T14:57:06.176Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://gluu5.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_75f0d46ef1081c657cd41949148a872a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>YbuMgHfKtTmeoZ3ugETAYDE6+nstoeRyk6WJ9TqxfEPdsNDebSxnxBfyMld2QTcsl9rEViB3HBsqoRvub8Zo+w==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>mNFl4DCxuMvM4yIej23aWaZyC8mTszOozYQSjNy777VpZsz3yEAiF9PvfUx5CRtYLHadgjbC6yj+51HwvkmIJL9v1u9Mo1GAFr/4kwmOW2p44rqNZ0FN46WWHCWIi5whYXQiTWN8qfmKJX0uDuvs3RXjLb9nNjsFugvt+nOWtF1103GAfZYC30xknkFutac2iipx58KQr0axtiKGnxJVgBnd7hwkePUGXX20X3Ikspv4EVsHgrwy0mobjYEm3nl+EPx9pM6+iLCVhkB9jJlmFRJO/wDl+PGmZzX77seX1Rx00hQjChqcAs/Qlwsr9NqY2VgQY2X4t+OLRtZT1MTQGQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqzCCApMCFFxtohCu6E8EsEOcPADjiIkYTmfpMA0GCSqGSIb3DQEBCwUAMIGRMQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_db9d5ac35b892c500e3a2c4a54726041" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_e2e6906e4987481d5a6e2da2157a32a9" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3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</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108808] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108808] [default]: message from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108808] [default]: searching metadata for message issuer...
2022-01-25 14:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [108808] [default]: recovered request/response correlation value (_835533b126d7be552edddbadc6a10191)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108808] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108808] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108808] [default]: inserted record (_75f0d46ef1081c657cd41949148a872a) in context (MessageFlow) with expiration (1643122866)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108808] [default]: validating signature profile
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108808] [default]: signature verified against message issuer
2022-01-25 14:57:06 DEBUG Shibboleth.SSO.SAML2 [108808] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 14:57:06 DEBUG XMLTooling.KeyInfoResolver.Inline [108808] [default]: resolved 0 certificate(s)
2022-01-25 14:57:06 DEBUG XMLTooling.KeyInfoResolver.Inline [108808] [default]: resolving ds:X509Certificate
2022-01-25 14:57:06 DEBUG XMLTooling.KeyInfoResolver.Inline [108808] [default]: resolved 1 certificate(s)
2022-01-25 14:57:06 DEBUG Shibboleth.SSO.SAML2 [108808] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_b3bfc981286dc2bcdfc0ae31afb5ec29" IssueInstant="2022-01-25T14:57:06.176Z" Version="2.0"><saml2:Issuer>https://gluu5.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://gluu5.pubsec.ukfast.team/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQxw2GFiWDOL8wnh5NdeUTYegLOV6lW83tPK4tMx33yi2ON/nV+epBIPl/y3VY1wFoJnu+2J/szlDjEuWkz1gUo5T4vuwYCHXzzTfy9NFEGuuMsSpo6HGIScjdTDpI=</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="80.244.179.100" InResponseTo="_835533b126d7be552edddbadc6a10191" NotOnOrAfter="2022-01-25T15:02:06.185Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2022-01-25T14:57:06.176Z" NotOnOrAfter="2022-01-25T15:02:06.176Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2022-01-25T14:56:26.375Z" SessionIndex="_cabcdfb5d3330f9b56e4de28fc465e22"><saml2:SubjectLocality Address="80.244.179.100"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion>
2022-01-25 14:57:06 DEBUG Shibboleth.SSO.SAML2 [108808] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108808] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108808] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108808] [default]: inserted record (_b3bfc981286dc2bcdfc0ae31afb5ec29) in context (MessageFlow) with expiration (1643122866)
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108808] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:57:06 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108808] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 14:57:06 DEBUG Shibboleth.SSO.SAML2 [108808] [default]: SSO profile processing completed successfully
2022-01-25 14:57:06 DEBUG Shibboleth.SSO.SAML2 [108808] [default]: extracting pushed attributes...
2022-01-25 14:57:06 DEBUG Shibboleth.AttributeExtractor.XML [108808] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 14:57:06 DEBUG Shibboleth.AttributeExtractor.XML [108808] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 14:57:06 DEBUG Shibboleth.AttributeExtractor.XML [108808] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 14:57:06 DEBUG Shibboleth.SessionCache [108808] [default]: creating new session
2022-01-25 14:57:06 DEBUG Shibboleth.SessionCache [108808] [default]: storing new session...
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108808] [default]: inserted record (session) in context (_62e3018c47c201355b135a805186655d) with expiration (1643126226)
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108808] [default]: inserted record (AAdzZWNyZXQxw2GFiWDOL8wnh5NdeUTYegLOV6lW83tPK4tMx33yi2ON/nV+epBIPl/y3VY1wFoJnu+2J/szlDjEuWkz1gUo5T4vuwYCHXzzTfy9NFEGuuMsSpo6HGIScjdTDpI=) in context (NameID) with expiration (1643151426)
2022-01-25 14:57:06 INFO Shibboleth.SessionCache [108808] [default]: new session created: ID (_62e3018c47c201355b135a805186655d) IdP (https://gluu5.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.22.242)
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108808] [default]: deleted record (f137c95579ee4db504d020a1542d4085c3dc73b81b139bce51a1d44ecefd6b01) in context (RelayState)
2022-01-25 14:57:06 DEBUG Shibboleth.SSO.SAML2 [108808] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 14:57:06 DEBUG Shibboleth.Listener [108808]: dispatching message (default::getHeaders::Application)
2022-01-25 14:57:06 DEBUG Shibboleth.Listener [108808] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 14:57:06 DEBUG XMLTooling.StorageService [108808] [default]: updated expiration of valid records in context (_62e3018c47c201355b135a805186655d) to (1643126226)
2022-01-25 14:57:07 DEBUG Shibboleth.Listener [108808] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 14:57:07 DEBUG XMLTooling.StorageService [108808] [default]: updated expiration of valid records in context (_62e3018c47c201355b135a805186655d) to (1643126227)
2022-01-25 14:58:30 DEBUG Shibboleth.Listener [108809] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 14:58:30 DEBUG XMLTooling.StorageService [108809] [default]: inserted record (51e1e7dd044d2e5cf1b52d3e21d94b763c9d4ca0cacce19fee38b1b5c8aad6bb) in context (RelayState) with expiration (1643123310)
2022-01-25 14:58:30 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108809] [default]: validating input
2022-01-25 14:58:30 DEBUG OpenSAML.MessageEncoder.SAML2 [108809] [default]: tracking request (_9f6dafd46c5b98d10629717aa22ff5b2) against RelayState token (ss:mem:51e1e7dd044d2e5cf1b52d3e21d94b763c9d4ca0cacce19fee38b1b5c8aad6bb)
2022-01-25 14:58:30 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108809] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 14:58:30 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108809] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://gluu5.pubsec.ukfast.team/idp/profile/SAML2/Redirect/SSO" ID="_9f6dafd46c5b98d10629717aa22ff5b2" IssueInstant="2022-01-25T14:58:30Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 14:58:30 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108809] [default]: message encoded, sending redirect to client
2022-01-25 14:58:31 DEBUG Shibboleth.Listener [108809] [default]: dispatching message (default/SAML2/POST)
2022-01-25 14:58:31 DEBUG OpenSAML.MessageDecoder.SAML2POST [108809] [default]: validating input
2022-01-25 14:58:31 DEBUG OpenSAML.MessageDecoder.SAML2POST [108809] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_796405f6f3f9cdbb304ca5c2d11aff03" InResponseTo="_9f6dafd46c5b98d10629717aa22ff5b2" IssueInstant="2022-01-25T14:58:31.473Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://gluu5.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_796405f6f3f9cdbb304ca5c2d11aff03"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>CKjwv//d5PbGgrxTM9VYq/Q/+b7fUQ/KbKjtNuBUAikXJ9PXNWHu8ioGZ00XT5o4ZRKweHx/YuATpLvmNEFepQ==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>pDUg2QNkth02nvfejvq6YmV/UCyDAWM34UKByyj9CpIt/BoGgMEkoWHUZdP28gDD0J6uqIR4nMF1uCBZ+gw5ypbbAOBUl1OZS7s8oZCriGPeR9qw/gjdcSNtNfSZQXuIam9TZZTPHwAdKRCgKrYADFnCu8Neugy4rL3ZlXTHbNytPNmlXBBvB/EjwbYaG7iGqDsbSqpS1P8JBcl+uHUzMkA2GOuc/tuCia7LTOxZHDbnkjUwUhxowcu3qNeGzia5A8AomphDKItKoMY8jW4gDQD7DMyrkZLXGlFEf5qzPVgw6Zu7+IFjkgU7b3ahXKzipaXcrHR1CIOHCkdM3BKDNw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqzCCApMCFFxtohCu6E8EsEOcPADjiIkYTmfpMA0GCSqGSIb3DQEBCwUAMIGRMQswCQYDVQQG
EwJHQjEPMA0GA1UECAwGTG9uZG9uMQ8wDQYDVQQHDAZMb25kb24xDzANBgNVBAoMBlVLZmFzdDEh
MB8GA1UEAwwYZ2x1dTUucHVic2VjLnVrZmFzdC50ZWFtMSwwKgYJKoZIhvcNAQkBFh1zdXBwb3J0
QGlkZW50aXR5bWV0aG9kcy5jby51azAeFw0yMjAxMjUxMDU5MjlaFw0yMzAxMjUxMDU5MjlaMIGR
MQswCQYDVQQGEwJHQjEPMA0GA1UECAwGTG9uZG9uMQ8wDQYDVQQHDAZMb25kb24xDzANBgNVBAoM
BlVLZmFzdDEhMB8GA1UEAwwYZ2x1dTUucHVic2VjLnVrZmFzdC50ZWFtMSwwKgYJKoZIhvcNAQkB
Fh1zdXBwb3J0QGlkZW50aXR5bWV0aG9kcy5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMzt3bK0UOZZWhbO3WvimuSj4SpjCHAnlIUbsW3iFAUUMef8Z4PKN1tNS5/YeVzU75Mv
DXuLh9L41YwpdbyIeJ8FZYHh8IGWpHBHGnnum34I/qKZhKZL209arP81v2lmB3FSmN3EWyziU+zk
dy8jVP2/Q6fApQBKf/IShl8mwfqHW2gn+eqv/3pho5CGyRIxlNzFcuxZ3WUaSzMgGASMipdm3U4A
RHhVEVIX2RN6Kv8KzT6kS3th5XOKcm/XNbw0b9wF6rdDn2pvOlx8VtioECaUAuD7sLLR45lxn6e6
0p7V8YovNGhVYWTRiX/JhCa/zatxhrta2A6yjv3Unu8nAbkCAwEAATANBgkqhkiG9w0BAQsFAAOC
AQEAJl9VJG+CkrnbGMkMPwbdiYtjLf7H9AlxMU4sluZp+L4YxogpoTAtGAwlWoDYTk1R1aXNd3kn
TLAPfJTaDvHJDKy5Nsp0U2bV+YQWbhj0tmDYO3WDMkp0jquM44E0n72BgXftE56MQeVqosxyWJJe
0JhlaLvsiVotZ9uvsh83D55LDRcd+filX1/Qc1PmIdqRBugwKYA3ursR0VRlwFFXr/vDFXNdgqrX
IZO06wMtgZ2310n3sbOc4mOg4RrRGhufWYojDw2JdDnbPKc0JZkUtoCu4G3i85uwuBvXXs3i6Q85
piyM1i2cLmYHqjBGxbtXKmSsJHr7qr39yzqvmGdquA==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_454fd3ec517dd2966c6481627d26d250" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_617fd6014646988088a7e85c23f75bdc" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3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</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2022-01-25 14:58:31 DEBUG OpenSAML.MessageDecoder.SAML2 [108809] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 14:58:31 DEBUG OpenSAML.MessageDecoder.SAML2 [108809] [default]: message from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:58:31 DEBUG OpenSAML.MessageDecoder.SAML2 [108809] [default]: searching metadata for message issuer...
2022-01-25 14:58:31 DEBUG OpenSAML.MessageDecoder.SAML2 [108809] [default]: recovered request/response correlation value (_9f6dafd46c5b98d10629717aa22ff5b2)
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108809] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108809] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:58:31 DEBUG XMLTooling.StorageService [108809] [default]: inserted record (_796405f6f3f9cdbb304ca5c2d11aff03) in context (MessageFlow) with expiration (1643122951)
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108809] [default]: validating signature profile
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108809] [default]: signature verified against message issuer
2022-01-25 14:58:31 DEBUG Shibboleth.SSO.SAML2 [108809] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 14:58:31 DEBUG XMLTooling.KeyInfoResolver.Inline [108809] [default]: resolved 0 certificate(s)
2022-01-25 14:58:31 DEBUG XMLTooling.KeyInfoResolver.Inline [108809] [default]: resolving ds:X509Certificate
2022-01-25 14:58:31 DEBUG XMLTooling.KeyInfoResolver.Inline [108809] [default]: resolved 1 certificate(s)
2022-01-25 14:58:31 DEBUG Shibboleth.SSO.SAML2 [108809] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_b2235c3e8c54fe1ee21169dc51c91a76" IssueInstant="2022-01-25T14:58:31.473Z" Version="2.0"><saml2:Issuer>https://gluu5.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://gluu5.pubsec.ukfast.team/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQx9BObtfnOtwp7LKGySv8FfqvpmB2XjDlrXuHIiU9wgOz4BV6m/MwwIYxprM3dLc3JA9vPsedNrs9rVltoieNiGShYu0yWmD6dF9H/dtsWoZjhSIo3ssC+IOgj5w==</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="80.244.179.100" InResponseTo="_9f6dafd46c5b98d10629717aa22ff5b2" NotOnOrAfter="2022-01-25T15:03:31.486Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2022-01-25T14:58:31.473Z" NotOnOrAfter="2022-01-25T15:03:31.473Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2022-01-25T14:58:31.424Z" SessionIndex="_f4582ef59ab63cd882f6d8e143703756"><saml2:SubjectLocality Address="80.244.179.100"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">JDoe@gluutraininglab.com</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">JDoe</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2022-01-25 14:58:31 DEBUG Shibboleth.SSO.SAML2 [108809] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108809] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108809] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:58:31 DEBUG XMLTooling.StorageService [108809] [default]: inserted record (_b2235c3e8c54fe1ee21169dc51c91a76) in context (MessageFlow) with expiration (1643122951)
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108809] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 14:58:31 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108809] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 14:58:31 DEBUG Shibboleth.SSO.SAML2 [108809] [default]: SSO profile processing completed successfully
2022-01-25 14:58:31 DEBUG Shibboleth.SSO.SAML2 [108809] [default]: extracting pushed attributes...
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeExtractor.XML [108809] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeExtractor.XML [108809] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeExtractor.XML [108809] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeDecoder.String [108809] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeDecoder.String [108809] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeFilter [108809] [default]: filtering 2 attribute(s) from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeFilter [108809] [default]: applying filtering rule(s) for attribute (uid) from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:58:31 DEBUG Shibboleth.AttributeFilter [108809] [default]: applying filtering rule(s) for attribute (mail) from (https://gluu5.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 14:58:31 DEBUG Shibboleth.SessionCache [108809] [default]: creating new session
2022-01-25 14:58:31 DEBUG Shibboleth.SessionCache [108809] [default]: storing new session...
2022-01-25 14:58:31 DEBUG XMLTooling.StorageService [108809] [default]: inserted record (session) in context (_7b90c63b528507766551a4ae59da32c3) with expiration (1643126311)
2022-01-25 14:58:31 DEBUG XMLTooling.StorageService [108809] [default]: inserted record (AAdzZWNyZXQx9BObtfnOtwp7LKGySv8FfqvpmB2XjDlrXuHIiU9wgOz4BV6m/MwwIYxprM3dLc3JA9vPsedNrs9rVltoieNiGShYu0yWmD6dF9H/dtsWoZjhSIo3ssC+IOgj5w==) in context (NameID) with expiration (1643151511)
2022-01-25 14:58:31 INFO Shibboleth.SessionCache [108809] [default]: new session created: ID (_7b90c63b528507766551a4ae59da32c3) IdP (https://gluu5.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.5.45)
2022-01-25 14:58:31 DEBUG XMLTooling.StorageService [108809] [default]: deleted record (51e1e7dd044d2e5cf1b52d3e21d94b763c9d4ca0cacce19fee38b1b5c8aad6bb) in context (RelayState)
2022-01-25 14:58:31 DEBUG Shibboleth.SSO.SAML2 [108809] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 14:58:32 DEBUG Shibboleth.Listener [108809]: dispatching message (default::getHeaders::Application)
2022-01-25 14:58:32 DEBUG Shibboleth.Listener [108809] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 14:58:32 DEBUG XMLTooling.StorageService [108809] [default]: updated expiration of valid records in context (_7b90c63b528507766551a4ae59da32c3) to (1643126312)
2022-01-25 14:58:32 DEBUG Shibboleth.Listener [108809] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 14:58:32 DEBUG XMLTooling.StorageService [108809] [default]: updated expiration of valid records in context (_7b90c63b528507766551a4ae59da32c3) to (1643126312)
2022-01-25 14:59:08 INFO Shibboleth.Listener [108808]: detected socket closure, shutting down worker thread
2022-01-25 15:00:17 INFO Shibboleth.Listener [108809]: detected socket closure, shutting down worker thread
2022-01-25 15:00:24 INFO Shibboleth.Listener [108807]: detected socket closure, shutting down worker thread
2022-01-25 15:01:09 DEBUG Shibboleth.Listener [108810] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:01:09 INFO OpenSAML.MetadataProvider.Dynamic [108810] [default]: resolving metadata for (https://gluu4.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:09 INFO OpenSAML.MetadataProvider.Dynamic [108810] [default]: caching resolved metadata for (https://gluu4.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:09 INFO OpenSAML.MetadataProvider.Dynamic [108810] [default]: next refresh of metadata for (https://gluu4.pubsec.ukfast.team/idp/shibboleth) no sooner than 28800 seconds
2022-01-25 15:01:09 DEBUG XMLTooling.StorageService [108810] [default]: inserted record (f87ad0d6cc6ad238099aed58187f29518d651dba87e17ed43c4b082e8539dd16) in context (RelayState) with expiration (1643123469)
2022-01-25 15:01:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108810] [default]: validating input
2022-01-25 15:01:09 DEBUG OpenSAML.MessageEncoder.SAML2 [108810] [default]: tracking request (_45999f750132c4805a25979942e6b179) against RelayState token (ss:mem:f87ad0d6cc6ad238099aed58187f29518d651dba87e17ed43c4b082e8539dd16)
2022-01-25 15:01:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108810] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:01:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108810] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://gluu4.pubsec.ukfast.team/idp/profile/SAML2/Redirect/SSO" ID="_45999f750132c4805a25979942e6b179" IssueInstant="2022-01-25T15:01:09Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:01:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108810] [default]: message encoded, sending redirect to client
2022-01-25 15:01:13 DEBUG Shibboleth.Listener [108810] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:01:13 DEBUG OpenSAML.MessageDecoder.SAML2POST [108810] [default]: validating input
2022-01-25 15:01:13 DEBUG OpenSAML.MessageDecoder.SAML2POST [108810] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_ac3cc6510eb7e9fa46a0a61d5456b256" InResponseTo="_45999f750132c4805a25979942e6b179" IssueInstant="2022-01-25T15:01:12.467Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://gluu4.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_ac3cc6510eb7e9fa46a0a61d5456b256"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>H8Sw3Qr9uG951qX9isjfksOxcLuMgvLosePMHsHvnrXgw4ojLGaJPa8YJRklmgV5crnsGg0JPe7DaFKMuPLT9A==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Zyym569/j8aQ44jexZIc2YaHkXE/2jHDmePFrIJLRg7UFReGsBADBdoMKlEiDbfi/SO9P30HRJoTChSQRCSCxRiAS6Op1Br533fGZdOwioaihi95O3slhYMdvkFb8Va4SwQTW+qRa5ynaNcid/xdv5geFVg5JrcMvPQz4Z/D5Dqzlxidee97PEWhgweLLbUuWtP8+aMfame9khBd6iCJ87FZn1seRHUhFAVuOM0QXUcOeU+y+YX22QYIuCPKGvu8+o9G+hWhWVRIOx2sSV5MggO4TDzAs5fy90F7M9/iSgGY3aQxK2TAfYXOET3DorAoMrIhtivgjANFm65Sik66lw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIID0zCCArsCFHV94MsKpVUEJE84zLgi0Db7/ilAMA0GCSqGSIb3DQEBCwUAMIGlMQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_030766c0c8a40df6dbd97aeb99dd7450" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_fb4921081d4fd79018d731bd28e5ac32" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3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</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>nPi8tJou6EoF41Yf/CvxSTvMeXdOsk+IxTfPjHJY4Xn7VFbkeolNcu7SQjo3Jeqp/6WaM1tlW0eC85sHYjGm59YagRlM2dDlFnCqmubugqNu/2j59sV4kfP/0hj6o0PmEmPIUBGETTKw41zAR9ADqakhdjYvhOhUoJfGIC1Bno5fTdNCXxdTwd6TvMbRrMP60/deksF2qB4heNLAthE80O8pZvgUZuneJw7zH7oHTLP/w2Ypw5arg3AVZdt2wcNZx58DotoOaQP1Pymqt74PFO/4GaGf4fmHQJN3j5Z2qpxHvxcZW/5x5JDIcuA7PaOpgR/YoEzZxd/oVDdksJl36b1PBo1TOkbYBsfRU3IaLVnxP5UXepvRU2NjtuCdDVxs5T5PJndKkvRw7Fy/RjOW14Y4gcbV1xg5G2rL45jerhZ1lcFc7K5NmWGdMfOSSddwvhoDoKnuThzh28ffPSCrugMLHssnXp+yP+IX3HbNcNqeg2CjPu6CX9ihIOC6cmwBMlizQRy6Fpxgs5ee0mm4EisS4YQSlfBP2kJPl8BoXVV32G/Aqg2yzpVCZFkA6angHuNSOpJ4sbzaYvrgGocoaXtRL5GUw9UWr/+wS3Vik8abGYHgW3T7bIgdSkhF71zyTU/WDreJWjh0UGw6VkiWf6jO9d9CbMqnYRqcensfg7SNst3MHgaINEBIyau7eO4g1Z02FOoQiNIjLAx2T3CpA3V7pIFMcvdErtxU9G5LGcoxxueyQPuzIBg21Yjkxo7p/NPaQLyTZbKZzM6yS2NVsiOFysxlIQ5H6ObE5pMA7hpTZ9zCAYwCBI7FcFonV0L6DvoxljH8TT26NHgaZ/41QWGwKSV24SQdpQGy0zKyDahgtcwsrM8ng/g9u5f1sVWNvsIOEKlG6VJvxsPa4rLvuIMrjHVKvSAqBiNXo0ppQv0gijPGG1HXInEMdlKxqu81am1b0+FdTTk0KPdk1o3DFhLKIc4WoFXKKOpJqjijnJT3b1kkF1OmxLUoST3u/oWdwGCsoplaZZskQbdBUeO9HQCYsrBCAk8/XRlAM/7ncdV7nseb402qnCzL4frudC6omo3idhOP2EfvSyBn7fsfIfyxxz815GMwLFnHpu14+fAmNmqGnIAHtnT+MY/WESQ6OSvGpQjXhP9XbIrfNgYnDv84JpdkrDGQ8PU3adEO3ZbR8aMWS5KmjZyhTSCi9FRK+LoqYrboJrC9pHeZxYN7QhrhLFrupC7mOYPX2WmWUOfgYKR6ZpMELD+rKvI9EmnLu6oUQjZXgme1SPMWFIPOxLWo1+M8dgNH4PXYtKP+iUj9mS+2trLOuZNLGBqyJT2h+bo+Aeu9nQKWMMfuS+D3qzy++ZJv/zGI8aUltNDt5Q/tVfl9ZERDbTHYd521c7xtjUUigNX9jLq//KngB9Yw9G1ERbWGFQv/iq9FBsF69zHk8fnsCcycAI11ZSIKIAxRUgJ1JvyMrraeQJAuSRtw6//UAC8MjOhFAsaRuvryxLvWVOoS2urrFqNPv82Cc1NOFQ48wY4RwcqQ/VTDYmX/4J1klSA8oWxZntUunZJUM0ZlOhQ8o+8BSxYzLbBl1monTEZaAOAbLi8fb6y4gHFrci/RGzthaeRIgvtgo2oeudQPqki6UItLHYHP4YTipVy55ZU4uew3XUVkiUMEou+B7kWNQm8lNVH+AAR6sopW+8+CVYZELJGUs+BVQnL6Rqi10iQ+U8EsNZXMSolCH3PgX0HdqTmKh1P2xa0QMckGEfKdTYGMexCRFwYygRzc7e2BX6VeRpOqOtCxla5ADSfTGSd2ii5AXo1FxuHmT0IK4zkdyL8Xk/rxyjk1r+KprfxZaVCohP9V9SeS33cDTPXROhfVI2zAzKrhCP/otgV1mBVBygNzICULM63hlNx+ZK0AeCG2ur5bfTOZTth5Cv8AJXmBchwTN7qiQWnyIxuep2iqgwzUhKQbjeyEr0lnnG026BTyVFUW6gexShjGadnRiMWYkD9UGEhwPTXLWIyhDlGp0hyir5EZkpynbJ3kI4W3ne1D6z0M0+PDw8u6U7rzrZFxPU0WCpT/7w8NqrEbJDNbsOYwjHDAILNPOvGQF8TjrKGKnd8rSG/FVnF1hxMpzDaO02PTSD7Pq/eDs46FsQr+bb8LW/mZoqDe8uyRhzndvt74ZdAMMd1IK16P8BciTMzXWQjHkAs5s5bFkmvkuTAuKUhcXnCIWPAa6TOfc+0KSbfEBvF3jLwwOOvq2z97H33U5eZGmurwawl2V6Z2PrvGDlP5oQtuXOD5UL9+ZHpQZsVJTW2uVDtXv9S/hCZePzl+YF895ACPvfSI9xRfY5uesjORuOvjAWFmHfNb5/P/zaNA4JwDRQoxtE0MuKheMzvJNoxV5FwmWLUdq+BH0/RSsGneTlWuTf6pGHV2RikwvPgNU7Ew/Y3yCHhufcOloXerplN8zCgPvI1yIROtqEAcaBq9QhFynKlLf7RxrD7PIV5Np4JNI+Hax3Qraqx07h3OYc6/yXC0PZG449Q5eewwyd6gBtWrpafGdmfe+S4ZdQZZ1MQRFWmH909cRLlPwpvzqloUZG7N2qJGXzdT4z+OJCO7qS5Q18yakCF0QvyOQ4SRLpvvexbz5wraPhAGPPxVQoMXI4sNl0KXF7EE3We1QiXpVE8Tu237Qu1AqUpA5NLJ9BhYFmPOLHVAQfWclXXDmgYsCnZqqPCJSkDg2KJt37sqbYzVw/05ed/a0mwTXKS7Iy9cLeKaPRg8J3ZFbOqrCv0DHd+5hz5kKRyDZCs9lG+ojofwrfsthAqCGXNa0nxvsPjaCzo1Kzwic32Bjm6tRucEKXWzuY8vafuW+HDFwvuHZqZMKI3aMCgiQfJX1Z2NP6dv/1fOZgVbXMVlwXOMJRi6il7ekhShAXM7nWdkPSMxeYoiJ5WO2kIYIVhei1gf7FBIRprW1k09NIWyxMWk8Z3oAi9UTTBDWUhpSbdDRGskdEsAPJnHv79nq4LEOabFGaf4kErKUJ5A96vOjQkSsRT9ur3zwXlkN02lHZhz5f+fW/jX8JGnt+W4JxTv0c9FgOWy1NfWuxEqhSZGry9AihVBIZW8BG06y/ofbP7SBrLauEo8d9fKxORQ3McvWcwHa6/GAlI2NlFHyzu8LBx8ww==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2022-01-25 15:01:13 DEBUG OpenSAML.MessageDecoder.SAML2 [108810] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:01:13 DEBUG OpenSAML.MessageDecoder.SAML2 [108810] [default]: message from (https://gluu4.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:13 DEBUG OpenSAML.MessageDecoder.SAML2 [108810] [default]: searching metadata for message issuer...
2022-01-25 15:01:13 DEBUG OpenSAML.MessageDecoder.SAML2 [108810] [default]: recovered request/response correlation value (_45999f750132c4805a25979942e6b179)
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108810] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108810] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: inserted record (_ac3cc6510eb7e9fa46a0a61d5456b256) in context (MessageFlow) with expiration (1643123112)
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108810] [default]: validating signature profile
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolving ds:X509Certificate
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolved 1 certificate(s)
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolved 0 CRL(s)
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolving ds:X509Certificate
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolved 1 certificate(s)
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolved 0 CRL(s)
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108810] [default]: signature verified against message issuer
2022-01-25 15:01:13 DEBUG Shibboleth.SSO.SAML2 [108810] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolved 0 certificate(s)
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolving ds:X509Certificate
2022-01-25 15:01:13 DEBUG XMLTooling.KeyInfoResolver.Inline [108810] [default]: resolved 1 certificate(s)
2022-01-25 15:01:13 DEBUG Shibboleth.SSO.SAML2 [108810] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_de0ddb0a562267dead7369ac8394bcb6" IssueInstant="2022-01-25T15:01:12.467Z" Version="2.0"><saml2:Issuer>https://gluu4.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://gluu4.pubsec.ukfast.team/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQxwtkVatd48UJAJPhhnSqmvBbMlquxxwFwzoNSqc7TLKswhCSvDgdURgO1lJ9Lnenp4xH4P/BGB/2rfhSvPXZu4BI9xefZosD7TgIpbzWLWptFQhCSddDwKyAJ9pk=</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="80.244.179.100" InResponseTo="_45999f750132c4805a25979942e6b179" NotOnOrAfter="2022-01-25T15:06:12.585Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2022-01-25T15:01:12.467Z" NotOnOrAfter="2022-01-25T15:06:12.467Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2022-01-25T15:01:12.240Z" SessionIndex="_72b8f58b9fb3a67216ba8b09008214c9"><saml2:SubjectLocality Address="80.244.179.100"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">admin@gluu4.pubsec.ukfast.team</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">admin</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2022-01-25 15:01:13 DEBUG Shibboleth.SSO.SAML2 [108810] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108810] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108810] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: inserted record (_de0ddb0a562267dead7369ac8394bcb6) in context (MessageFlow) with expiration (1643123112)
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108810] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:01:13 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108810] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:01:13 DEBUG Shibboleth.SSO.SAML2 [108810] [default]: SSO profile processing completed successfully
2022-01-25 15:01:13 DEBUG Shibboleth.SSO.SAML2 [108810] [default]: extracting pushed attributes...
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeExtractor.XML [108810] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeExtractor.XML [108810] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeExtractor.XML [108810] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeDecoder.String [108810] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeDecoder.String [108810] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeFilter [108810] [default]: filtering 2 attribute(s) from (https://gluu4.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeFilter [108810] [default]: applying filtering rule(s) for attribute (uid) from (https://gluu4.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:13 DEBUG Shibboleth.AttributeFilter [108810] [default]: applying filtering rule(s) for attribute (mail) from (https://gluu4.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:13 DEBUG Shibboleth.SessionCache [108810] [default]: creating new session
2022-01-25 15:01:13 DEBUG Shibboleth.SessionCache [108810] [default]: storing new session...
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: inserted record (session) in context (_586428f0accd0eee7b2b4b6b31446ad3) with expiration (1643126473)
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: inserted record (AAdzZWNyZXQxwtkVatd48UJAJPhhnSqmvBbMlquxxwFwzoNSqc7TLKswhCSvDgdURgO1lJ9Lnenp4xH4P/BGB/2rfhSvPXZu4BI9xefZosD7TgIpbzWLWptFQhCSddDwKyAJ9pk=) in context (NameID) with expiration (1643151673)
2022-01-25 15:01:13 INFO Shibboleth.SessionCache [108810] [default]: new session created: ID (_586428f0accd0eee7b2b4b6b31446ad3) IdP (https://gluu4.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.5.45)
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: deleted record (f87ad0d6cc6ad238099aed58187f29518d651dba87e17ed43c4b082e8539dd16) in context (RelayState)
2022-01-25 15:01:13 DEBUG Shibboleth.SSO.SAML2 [108810] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:01:13 DEBUG Shibboleth.Listener [108810]: dispatching message (default::getHeaders::Application)
2022-01-25 15:01:13 DEBUG Shibboleth.Listener [108810] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: updated expiration of valid records in context (_586428f0accd0eee7b2b4b6b31446ad3) to (1643126473)
2022-01-25 15:01:13 DEBUG Shibboleth.Listener [108810] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:01:13 DEBUG XMLTooling.StorageService [108810] [default]: updated expiration of valid records in context (_586428f0accd0eee7b2b4b6b31446ad3) to (1643126473)
2022-01-25 15:01:36 DEBUG Shibboleth.Listener [108811] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:01:36 INFO OpenSAML.MetadataProvider.Dynamic [108811] [default]: resolving metadata for (https://gluu1.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:36 INFO OpenSAML.MetadataProvider.Dynamic [108811] [default]: caching resolved metadata for (https://gluu1.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:36 INFO OpenSAML.MetadataProvider.Dynamic [108811] [default]: next refresh of metadata for (https://gluu1.pubsec.ukfast.team/idp/shibboleth) no sooner than 28800 seconds
2022-01-25 15:01:36 DEBUG XMLTooling.StorageService [108811] [default]: inserted record (d838e319523d03ce4b2a938fc9bdd9cae365d71a92f07e107709d0329578ced0) in context (RelayState) with expiration (1643123496)
2022-01-25 15:01:36 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108811] [default]: validating input
2022-01-25 15:01:36 DEBUG OpenSAML.MessageEncoder.SAML2 [108811] [default]: tracking request (_dcbe6c94d5cc328e61d9d2a0b01f33ea) against RelayState token (ss:mem:d838e319523d03ce4b2a938fc9bdd9cae365d71a92f07e107709d0329578ced0)
2022-01-25 15:01:36 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108811] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:01:36 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108811] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://gluu1.pubsec.ukfast.team/idp/profile/SAML2/Redirect/SSO" ID="_dcbe6c94d5cc328e61d9d2a0b01f33ea" IssueInstant="2022-01-25T15:01:36Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:01:36 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108811] [default]: message encoded, sending redirect to client
2022-01-25 15:01:48 DEBUG Shibboleth.Listener [108812] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:01:48 INFO OpenSAML.MetadataProvider.Dynamic [108812] [default]: resolving metadata for (https://gluu3.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:48 INFO OpenSAML.MetadataProvider.Dynamic [108812] [default]: caching resolved metadata for (https://gluu3.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:48 INFO OpenSAML.MetadataProvider.Dynamic [108812] [default]: next refresh of metadata for (https://gluu3.pubsec.ukfast.team/idp/shibboleth) no sooner than 28800 seconds
2022-01-25 15:01:48 DEBUG XMLTooling.StorageService [108812] [default]: inserted record (19754d26520a2662e62a3c3331bf75d71ba33de3a443abc7707f26b60d5900e8) in context (RelayState) with expiration (1643123508)
2022-01-25 15:01:48 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108812] [default]: validating input
2022-01-25 15:01:48 DEBUG OpenSAML.MessageEncoder.SAML2 [108812] [default]: tracking request (_0d95adb3834824058aa7f4b025cdb89b) against RelayState token (ss:mem:19754d26520a2662e62a3c3331bf75d71ba33de3a443abc7707f26b60d5900e8)
2022-01-25 15:01:48 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108812] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:01:48 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108812] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://gluu3.pubsec.ukfast.team/idp/profile/SAML2/Redirect/SSO" ID="_0d95adb3834824058aa7f4b025cdb89b" IssueInstant="2022-01-25T15:01:48Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:01:48 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108812] [default]: message encoded, sending redirect to client
2022-01-25 15:01:51 DEBUG Shibboleth.Listener [108812] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:01:51 DEBUG OpenSAML.MessageDecoder.SAML2POST [108812] [default]: validating input
2022-01-25 15:01:51 DEBUG OpenSAML.MessageDecoder.SAML2POST [108812] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_4bc7afd90206e517c4a04b459b6ad2fa" InResponseTo="_0d95adb3834824058aa7f4b025cdb89b" IssueInstant="2022-01-25T15:01:50.413Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://gluu3.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_4bc7afd90206e517c4a04b459b6ad2fa"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>kJlYK7kGKftPb5lX3fdX/NpO9z+X4z0W8xMMgPqv8kkDR0OLD+ATy843zqjvvt4sJlxKLQqbr6kaeV/VJC+vuQ==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>XCrE0QqYaQjZJ8tQXZmfmw8tBUVTvPW20nxIISS/QClxnQy+GVEK6WyoBxXMEUHSvwabTeSf7o+kw07xTe+XyVfqcKLEMV0/f94ga2tmK87JFi8eAW0a/lg0kaJZdOBPGBS9xxEM67Qk3gSmeQpxj+Y5JTHS1ztG+A6x9UMI1JwE+k9L3HexCqImLHk+q1kVfD99m60DNJq40EEztWstzVwIGDNKlSUVoqlVr2SnntcPeQEHgvfWoAYTf06grYb0s6sWhFBWZ88WgelfPLnm3CYHqcoL0hPxsM2nRcC15EppEDuN9zaJ/rH+Kcbz9cV57qw57uvWBUA/d5rAxbx1Kw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDozCCAosCFFrK/blSFnfzxtUTzC9oVGxFhfopMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_fd83ff8c126603f1bc46eb0e358874e0" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_57586f3e16ce390f087252daaf754555" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3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</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2022-01-25 15:01:51 DEBUG OpenSAML.MessageDecoder.SAML2 [108812] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:01:51 DEBUG OpenSAML.MessageDecoder.SAML2 [108812] [default]: message from (https://gluu3.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:51 DEBUG OpenSAML.MessageDecoder.SAML2 [108812] [default]: searching metadata for message issuer...
2022-01-25 15:01:51 DEBUG OpenSAML.MessageDecoder.SAML2 [108812] [default]: recovered request/response correlation value (_0d95adb3834824058aa7f4b025cdb89b)
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108812] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108812] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:01:51 DEBUG XMLTooling.StorageService [108812] [default]: inserted record (_4bc7afd90206e517c4a04b459b6ad2fa) in context (MessageFlow) with expiration (1643123150)
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108812] [default]: validating signature profile
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolving ds:X509Certificate
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolved 1 certificate(s)
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolved 0 CRL(s)
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolving ds:X509Certificate
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolved 1 certificate(s)
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolved 0 CRL(s)
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108812] [default]: signature verified against message issuer
2022-01-25 15:01:51 DEBUG Shibboleth.SSO.SAML2 [108812] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolved 0 certificate(s)
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolving ds:X509Certificate
2022-01-25 15:01:51 DEBUG XMLTooling.KeyInfoResolver.Inline [108812] [default]: resolved 1 certificate(s)
2022-01-25 15:01:51 DEBUG Shibboleth.SSO.SAML2 [108812] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_890a7ed32e11a80008a4fc1ca4e25a56" IssueInstant="2022-01-25T15:01:50.413Z" Version="2.0"><saml2:Issuer>https://gluu3.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://gluu3.pubsec.ukfast.team/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQx15jd4i/7K+GhY6GkyCilLbL7qMI+f84umvkB9NzEfjJAcOOj3tIhnlcGeqD8ZbcGBbtMhf85DWuxvNdYOo4eKm9gMFmEoyRTNuyfvnpJvMdl3KSiSkIh296C4Ao=</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="80.244.179.100" InResponseTo="_0d95adb3834824058aa7f4b025cdb89b" NotOnOrAfter="2022-01-25T15:06:50.494Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2022-01-25T15:01:50.413Z" NotOnOrAfter="2022-01-25T15:06:50.413Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2022-01-25T15:01:50.187Z" SessionIndex="_1de0080e47f27730bd126529f6812210"><saml2:SubjectLocality Address="80.244.179.100"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">admin@gluu3.pubsec.ukfast.team</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">admin</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2022-01-25 15:01:51 DEBUG Shibboleth.SSO.SAML2 [108812] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108812] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108812] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:01:51 DEBUG XMLTooling.StorageService [108812] [default]: inserted record (_890a7ed32e11a80008a4fc1ca4e25a56) in context (MessageFlow) with expiration (1643123150)
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108812] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:01:51 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108812] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:01:51 DEBUG Shibboleth.SSO.SAML2 [108812] [default]: SSO profile processing completed successfully
2022-01-25 15:01:51 DEBUG Shibboleth.SSO.SAML2 [108812] [default]: extracting pushed attributes...
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeExtractor.XML [108812] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeExtractor.XML [108812] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeExtractor.XML [108812] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeDecoder.String [108812] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeDecoder.String [108812] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeFilter [108812] [default]: filtering 2 attribute(s) from (https://gluu3.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeFilter [108812] [default]: applying filtering rule(s) for attribute (uid) from (https://gluu3.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:51 DEBUG Shibboleth.AttributeFilter [108812] [default]: applying filtering rule(s) for attribute (mail) from (https://gluu3.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:01:51 DEBUG Shibboleth.SessionCache [108812] [default]: creating new session
2022-01-25 15:01:51 DEBUG Shibboleth.SessionCache [108812] [default]: storing new session...
2022-01-25 15:01:51 DEBUG XMLTooling.StorageService [108812] [default]: inserted record (session) in context (_e889f8ae8712381bde5a6bc5f4607d92) with expiration (1643126511)
2022-01-25 15:01:51 DEBUG XMLTooling.StorageService [108812] [default]: inserted record (AAdzZWNyZXQx15jd4i/7K+GhY6GkyCilLbL7qMI+f84umvkB9NzEfjJAcOOj3tIhnlcGeqD8ZbcGBbtMhf85DWuxvNdYOo4eKm9gMFmEoyRTNuyfvnpJvMdl3KSiSkIh296C4Ao=) in context (NameID) with expiration (1643151711)
2022-01-25 15:01:51 INFO Shibboleth.SessionCache [108812] [default]: new session created: ID (_e889f8ae8712381bde5a6bc5f4607d92) IdP (https://gluu3.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.45.220)
2022-01-25 15:01:51 DEBUG XMLTooling.StorageService [108812] [default]: deleted record (19754d26520a2662e62a3c3331bf75d71ba33de3a443abc7707f26b60d5900e8) in context (RelayState)
2022-01-25 15:01:51 DEBUG Shibboleth.SSO.SAML2 [108812] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:01:51 DEBUG Shibboleth.Listener [108812]: dispatching message (default::getHeaders::Application)
2022-01-25 15:01:51 DEBUG Shibboleth.Listener [108812] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:01:51 DEBUG XMLTooling.StorageService [108812] [default]: updated expiration of valid records in context (_e889f8ae8712381bde5a6bc5f4607d92) to (1643126511)
2022-01-25 15:01:52 DEBUG Shibboleth.Listener [108812] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:01:52 DEBUG XMLTooling.StorageService [108812] [default]: updated expiration of valid records in context (_e889f8ae8712381bde5a6bc5f4607d92) to (1643126512)
2022-01-25 15:02:00 INFO Shibboleth.Listener [108811]: detected socket closure, shutting down worker thread
2022-01-25 15:02:10 DEBUG Shibboleth.Listener [108813] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:02:10 DEBUG OpenSAML.MessageDecoder.SAML2POST [108813] [default]: validating input
2022-01-25 15:02:10 DEBUG OpenSAML.MessageDecoder.SAML2POST [108813] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_5f546c31bf85a8a4d1c826b7f3a51534" InResponseTo="_dcbe6c94d5cc328e61d9d2a0b01f33ea" IssueInstant="2022-01-25T15:02:08.927Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://gluu1.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_5f546c31bf85a8a4d1c826b7f3a51534"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>0klNKNNw+SMXyAf82qmVoh33wucWEzIF9KUXq9mj2qbLFKIh1xnD8+VrV4GfjGVryJOkz/kMXMzAAudIfoH05g==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>FCciX7WBt9dWBQKyE3tgOV/oDR0CELzTQyLPdGa6LLM22+zLQgFYAjrkh3Z46uM3VapWpjWGCGEI2QH5kCCjlVZwYYi3ulk2IAKcOHC35awihBg05gW84qnXJdAwkThN9IfVJ4JAvSsg9g8iZb94z4eLUQ+BRI95S8GM3Q2SVs9qJETzDa+yk/fnKeBBpsscTrJxYUXHI22TKdFsCXls4LX+ZtqqZ+vElkyMo3TPbmH/e0GQr44LD22ldRciMGstJ/izLVFpCGQe6nVo/GS+mYu3Eyd1tuH8Z9by2NRI8/siHWf71hp14FOjPSTm5Bq5I1N03PM3z98bX9bE43Q4xA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqzCCApMCFEPa7RlsXnmzYUecGD4hqXXdhRiuMA0GCSqGSIb3DQEBCwUAMIGRMQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_1ae468355e3041002b4d49578e404cb3" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_4770479fd48aa204669614755b35c0db" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3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</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>St0/FqQO7tvRYgWTsgbwjpc5vvrmX9g8JjbYDMocm6skB+9YiiCqjyj8lizF0TGWAb3hhj0ieoeojqrGar9MltJSh0eX3PpnzcWvAYqzsitZDadiLCyT8X1TPv1bLOupasalb6OrBikw8Lz0GbjJMg2dPTSVSzjO49ZgytvOkLLnTZp8uJ8iRtcKIs1omWLAL+9VcLsjhCXewJmmHfVY5R93AdbfB8fzf3zFCZ9ZB41X6RJqFa561aQzNqWC1AKBkPp0OLpNCGC2RzlHGFRKQh/Lv0auExKS4F1aA3wWzHvbRAxEGh+1CDH9K1pCYE/6mfUuffb8xcSyZjZi6xSyTJVJ3BwHTj6uEc26zlvDuDEkrppxa+0v6UsKj/GDcL3KBhKNniJgYDtY4xfQKizasZ6Nu1/8lE0sdbcNNHbiYaabUbx2yftAJHGqU1m2JZ9OYNy4oXYUVmCHj69fhLwLS56RurUOaj+PN99ue7KYtU+x5tRCPc6n6+qyagRdVpWsDnRXsoIt5S0j9FJP1kv0CYPuN+jvO+mVqXwH9PUvGIUbLcLyTEKIZY4fKbC5h8U2aLSMMErC+o4UVeiczoruLS3wFo03RukAUVW1h1Uhb7SfCdsSPF/sE6aL2C/L1NSSWhwUMFe7qwlafoGEKooQZfG9ORAzhYdCg635ccf4yzm1J1F6Qr5lfbge2pA3W5P80age8rSrjMPFmPiwxw3MAh3p4X+UrVSHG2i1ZzSth/Wh0ZAv73kpuI7Li0O6FgnZf9aAfiTUbTdEnAvobaLsTDSFs096MpSrcS4Zn5+HNvF6+lIFc7JeiWiktgBeFuJ5mA+y25jAVi4svfCQeXQ1VbpA9n8YulNznHEYGmLKnyXYEhD+YQOVSzYTm1guWF9QwYtGqEC3LQfWPrz+muHawoSsNAHW+LDwqvokzCX0KlvPIrzC/rxYzcIfUWI4fy5DVGlAwjhaQ12DXoqm96gKP5tz8EmAa/jV7IcanniUtT0V//sw9Y2yFf2vfPq+yhKk5+Wvte5bSZ3y7v0VefQ/pSW2ym7CJuhWlfFzmUewRWTDuYcNxdawJV5P8heSfeP8pZ3sEs0wvdE0hnbb8PSTi+g6n31eiUuj8tukR5zmbYoj1IFgXZ9u95Zz43rcyjF1XXQbmjuupp1YkTb1pwnI7UsPco950HFJh5EEa9SJenozNLm3Z0lUDTkttUF6lrwz4DA9C5uwDudNTuNWtZGmsP1IAVqCoiWLEyywzVCJ//eQBuCAveRZvj0vb1ukjEGgUWmSeKkBhvuKPZIYK4HhedpT1/oOHZd5RJHNnI6UwSm+AA7ZXykmxRYdt2Sq7rzjob/ZVByyR7iBMfdNBxyyE0IVKOfEhAc54b2/zecNXUMMNaZR9lj/AgXwGgQVZGo+HcniIUEjUXGVPF4cWX8r/tcRHOr5MJZwizlD0izm1ojIccaltesnG9m7JTP/BKrOpFO792bsbzJzZRrgq4C39GLvYPx9wZUjmer1oYzVbpddQzFLWpaztFbT94h2Xijg5X7bKA+5Y4b6Np5wtd2m57pMbvJh2ysBS2AnNxGDPuVEmqJV5XCJkn0NcWIcnRDUnEeosoKVp25S9AdNSuBr94PB90mAPOJctDGoMWC6euVYxMR1nWLxGEhcCaYTPN4tIoZ1Nz6VqcavcbJSTCYQzCDeMZ7VeYhgGM2TC75p+hlqTNrITm3AuEvUJ9rOL25tSeb+J0dNSYT1RRL7NRcAztlHkz/5/Rk0Ng6wvnrvjlSgD3jaYFBJPzHGrzQPuVU5SC+ydDZ0yDMbGjNU7Es7pDnexNIia/wxoLbk++2jMO70PbhSSB/t8Y3dLN9Dmiq9EMSlzWa4zRfVpr9v9qtB8dvHKn1hBprTdRIoq5Oh+uV9zkjs+3jK9zfy1eLugAxq3aLxxal2rrJuN1u0tmCruj9EvgPUWOAic3+KAiBdCIZPuwFwvSTCwu0BrPhmQzJgmTGgz+nO24VT+OEPm5d8ywI0CAc79xmcVydUmz/A/8WyL1M12hQywNR7pe05N6OemViK4yJ4QpA3Qn1JrQ+WBoWco7WlRhqYXZ2xs87N9W1nQ5QTEyo+952Mrb+h68UgvLnQM1yI0gS6KaqhSNY1q4rWmt/1AmT7UTVlBlRblkpdlZgTEs5FGuF/Z7lGHQBLFc8Rt0oul1uh5x5EBumJNLTh2IfOpVoxKmbCJCDr0tPVnL/pv/JO2fDDzbh4MIP9+G6aQEBzndAMJzHoi8EmEvcFS+Y+pyaPChTNkALUVNkQPbSJZxdpjJJscrrB/+qM46u/LMgVpEp66o92ulY9sS5NgN7Cab/VRsEoMIWvWJ7oPPBCjjxRYz933hNryEtlqd+K01KvL/os/QWUnmLlAXCG2dJs+AI5HfiouCbIr4mmoTACbrD0ugcbEtRrgUsoXuejRgQgYSywy3JTm8ecOxNVUNA3vDJP/A1cN2Mp6usnIujCHkiIJ/SGH8L0iNUWXJT7q/YygkN5Vah+a01QwThQV0SeEkXQfV92tRmH2jL8F/+b7pQeGftgBFsR35LfpJjLz3o23ClhbDpE/nOUyclsP/G9Jz/s2+Uf4C7VmwbLWFMdXX0i89G6zxros9CsmzenajHHOYJe99XekXNdqOkp2mqBFpZDImfhoYk6Ye2FAsZEuR94OYcMtQ+tf53r09ZLqCOOEruLtRxXEjB+RxiWujfgqNj0RHvCZNayq/IgCS2k41NNCArue65RNtCBNvBZiBOB7JAVqJyg6KzVM1U/7Y5dw2H86Qq2OzxlVMEK/6RNtoXW51RZIDWc+GIXDTlJhJA2SBhVuKErvoZ0DzyQV3YYLJAqsFTkcFDA+3Mp4CXUvHgsd9SVBisK70DnL/EsusL7X9A6PEuNh5qRoxrhCUv37G0pXno9gOmXNR6JW7Pf+RynFDvAr/3savQq4s1dCxtUOl7vLQPmOxsDLGH7+dVod5x/bUUcDMfBhjGObivyLuO9Ed26Ro/5aZYTW/lyKisNOk9Ab7exLkxtEPDdOQ9wFM3zxWbkfdVrlgKahsr197mk7QaULqIfudnUTCFeqheVV/LYpHnSgZmwrz+P9sGRjuyRguHxGUjPNXkz+4O5xEod4tPjMUJ0nbGmyASW9wYCfyUXMw==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2022-01-25 15:02:10 DEBUG OpenSAML.MessageDecoder.SAML2 [108813] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:02:10 DEBUG OpenSAML.MessageDecoder.SAML2 [108813] [default]: message from (https://gluu1.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:02:10 DEBUG OpenSAML.MessageDecoder.SAML2 [108813] [default]: searching metadata for message issuer...
2022-01-25 15:02:10 DEBUG OpenSAML.MessageDecoder.SAML2 [108813] [default]: recovered request/response correlation value (_dcbe6c94d5cc328e61d9d2a0b01f33ea)
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108813] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108813] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: inserted record (_5f546c31bf85a8a4d1c826b7f3a51534) in context (MessageFlow) with expiration (1643123168)
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108813] [default]: validating signature profile
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolving ds:X509Certificate
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolved 1 certificate(s)
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolved 0 CRL(s)
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolving ds:X509Certificate
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolved 1 certificate(s)
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolved 0 CRL(s)
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108813] [default]: signature verified against message issuer
2022-01-25 15:02:10 DEBUG Shibboleth.SSO.SAML2 [108813] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolved 0 certificate(s)
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolving ds:X509Certificate
2022-01-25 15:02:10 DEBUG XMLTooling.KeyInfoResolver.Inline [108813] [default]: resolved 1 certificate(s)
2022-01-25 15:02:10 DEBUG Shibboleth.SSO.SAML2 [108813] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_492f081a28b1cf8c25d38b7739775cdb" IssueInstant="2022-01-25T15:02:08.927Z" Version="2.0"><saml2:Issuer>https://gluu1.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://gluu1.pubsec.ukfast.team/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQx5fLBPWCIAWJcWtJ2xBbG7Kk4V42/DdClAw6jOzFD267Io+F+uGCJ4gYfBDmjN/IlRHzDDv/ZuBTauNe/9maW6gxfPMWnGUoMmk10DhrG0xP6CnN0RMQSGYPQoA==</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="78.105.37.153" InResponseTo="_dcbe6c94d5cc328e61d9d2a0b01f33ea" NotOnOrAfter="2022-01-25T15:07:09.030Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2022-01-25T15:02:08.927Z" NotOnOrAfter="2022-01-25T15:07:08.927Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2022-01-25T15:02:08.549Z" SessionIndex="_bcdff15681652d307523d4a5a3d26394"><saml2:SubjectLocality Address="78.105.37.153"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">jdoe@gluutraininglab.com</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">jdoe</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2022-01-25 15:02:10 DEBUG Shibboleth.SSO.SAML2 [108813] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108813] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108813] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: inserted record (_492f081a28b1cf8c25d38b7739775cdb) in context (MessageFlow) with expiration (1643123168)
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108813] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:02:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108813] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:02:10 DEBUG Shibboleth.SSO.SAML2 [108813] [default]: SSO profile processing completed successfully
2022-01-25 15:02:10 DEBUG Shibboleth.SSO.SAML2 [108813] [default]: extracting pushed attributes...
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeExtractor.XML [108813] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeExtractor.XML [108813] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeExtractor.XML [108813] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeDecoder.String [108813] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeDecoder.String [108813] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeFilter [108813] [default]: filtering 2 attribute(s) from (https://gluu1.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeFilter [108813] [default]: applying filtering rule(s) for attribute (uid) from (https://gluu1.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:02:10 DEBUG Shibboleth.AttributeFilter [108813] [default]: applying filtering rule(s) for attribute (mail) from (https://gluu1.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:02:10 DEBUG Shibboleth.SessionCache [108813] [default]: creating new session
2022-01-25 15:02:10 DEBUG Shibboleth.SessionCache [108813] [default]: storing new session...
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: inserted record (session) in context (_d485cf2888c6fa917926e61109c798cc) with expiration (1643126530)
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: inserted record (AAdzZWNyZXQx5fLBPWCIAWJcWtJ2xBbG7Kk4V42/DdClAw6jOzFD267Io+F+uGCJ4gYfBDmjN/IlRHzDDv/ZuBTauNe/9maW6gxfPMWnGUoMmk10DhrG0xP6CnN0RMQSGYPQoA==) in context (NameID) with expiration (1643151730)
2022-01-25 15:02:10 INFO Shibboleth.SessionCache [108813] [default]: new session created: ID (_d485cf2888c6fa917926e61109c798cc) IdP (https://gluu1.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.5.45)
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: deleted record (d838e319523d03ce4b2a938fc9bdd9cae365d71a92f07e107709d0329578ced0) in context (RelayState)
2022-01-25 15:02:10 DEBUG Shibboleth.SSO.SAML2 [108813] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:02:10 DEBUG Shibboleth.Listener [108813]: dispatching message (default::getHeaders::Application)
2022-01-25 15:02:10 DEBUG Shibboleth.Listener [108813] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: updated expiration of valid records in context (_d485cf2888c6fa917926e61109c798cc) to (1643126530)
2022-01-25 15:02:10 DEBUG Shibboleth.Listener [108813] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:02:10 DEBUG XMLTooling.StorageService [108813] [default]: updated expiration of valid records in context (_d485cf2888c6fa917926e61109c798cc) to (1643126530)
2022-01-25 15:02:25 INFO Shibboleth.Listener [108812]: detected socket closure, shutting down worker thread
2022-01-25 15:02:47 DEBUG Shibboleth.Listener [108814]: dispatching message (default::getHeaders::Application)
2022-01-25 15:02:47 DEBUG Shibboleth.Listener [108814] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:02:47 DEBUG XMLTooling.StorageService [108814] [default]: updated expiration of valid records in context (_e889f8ae8712381bde5a6bc5f4607d92) to (1643126567)
2022-01-25 15:02:55 DEBUG Shibboleth.Listener [108815] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:02:55 INFO OpenSAML.MetadataProvider.Dynamic [108815] [default]: resolving metadata for (https://gluu2.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:02:55 INFO OpenSAML.MetadataProvider.Dynamic [108815] [default]: caching resolved metadata for (https://gluu2.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:02:55 INFO OpenSAML.MetadataProvider.Dynamic [108815] [default]: next refresh of metadata for (https://gluu2.pubsec.ukfast.team/idp/shibboleth) no sooner than 28800 seconds
2022-01-25 15:02:55 DEBUG XMLTooling.StorageService [108815] [default]: inserted record (6f49bc156a4f95d47e8ad838ea03c275273b1396bc35642734cb4d269866b2e4) in context (RelayState) with expiration (1643123575)
2022-01-25 15:02:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108815] [default]: validating input
2022-01-25 15:02:55 DEBUG OpenSAML.MessageEncoder.SAML2 [108815] [default]: tracking request (_f8c34efcc771d34a9f06ff9986420eba) against RelayState token (ss:mem:6f49bc156a4f95d47e8ad838ea03c275273b1396bc35642734cb4d269866b2e4)
2022-01-25 15:02:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108815] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:02:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108815] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://gluu2.pubsec.ukfast.team/idp/profile/SAML2/Redirect/SSO" ID="_f8c34efcc771d34a9f06ff9986420eba" IssueInstant="2022-01-25T15:02:55Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:02:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108815] [default]: message encoded, sending redirect to client
2022-01-25 15:03:00 DEBUG Shibboleth.Listener [108815] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:03:00 DEBUG OpenSAML.MessageDecoder.SAML2POST [108815] [default]: validating input
2022-01-25 15:03:00 DEBUG OpenSAML.MessageDecoder.SAML2POST [108815] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_44a72710d45531ba9b28e3ea81f68ac5" InResponseTo="_f8c34efcc771d34a9f06ff9986420eba" IssueInstant="2022-01-25T15:02:58.852Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://gluu2.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_44a72710d45531ba9b28e3ea81f68ac5"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>UzcmlNsW0cWrbll3wbAsvNLYCRZShrqo5TsFs2zul8LEK2WMqUJORCYHpzuY+y5M+RfQhTDBmxwEN0SYrrt9bg==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>kMjR8p6ITAu9C94rgrm920dpJ0D5TeBcPO5JEMZ3hX9r18m8SHuiS8xzgMbzv7FnmR8IL+KOiIk3LZ2ORAcATJG8/IyTG0ZSQLy36Ok6EAVLUon1iEJZQyjE5qc8ptUPxS5x69XrHQWqm3RPEUJRTUhtdCiXYzbppSiS6y8uuuXq5I5xfVJ93viCV9m0KLles35/fLDebNcfQ35RoafEwiB3tzYVZ9OlDkTE29in51ImUfn7ywk4kLBYb+I2migamRfSmhGi69BUJJiT5ejSTUZZbH7tThqPM3aFERlOMXbNMcLtsPZ+imtW+dDlin+GXV8JJrWO9FFE2ujLVqVQtg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDvTCCAqUCFDLmyzNhTyrrb00kFQLpuGl6syk3MA0GCSqGSIb3DQEBCwUAMIGaMQswCQYDVQQG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==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_ec63a435df01b8c3fbced6a5ad0dbe61" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_7000b99104671408e397df39a8f20b11" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3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</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2022-01-25 15:03:00 DEBUG OpenSAML.MessageDecoder.SAML2 [108815] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:03:00 DEBUG OpenSAML.MessageDecoder.SAML2 [108815] [default]: message from (https://gluu2.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:03:00 DEBUG OpenSAML.MessageDecoder.SAML2 [108815] [default]: searching metadata for message issuer...
2022-01-25 15:03:00 DEBUG OpenSAML.MessageDecoder.SAML2 [108815] [default]: recovered request/response correlation value (_f8c34efcc771d34a9f06ff9986420eba)
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108815] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108815] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:03:00 DEBUG XMLTooling.StorageService [108815] [default]: inserted record (_44a72710d45531ba9b28e3ea81f68ac5) in context (MessageFlow) with expiration (1643123218)
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108815] [default]: validating signature profile
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolving ds:X509Certificate
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolved 1 certificate(s)
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolved 0 CRL(s)
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolving ds:X509Certificate
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolved 1 certificate(s)
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolved 0 CRL(s)
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108815] [default]: signature verified against message issuer
2022-01-25 15:03:00 DEBUG Shibboleth.SSO.SAML2 [108815] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolved 0 certificate(s)
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolving ds:X509Certificate
2022-01-25 15:03:00 DEBUG XMLTooling.KeyInfoResolver.Inline [108815] [default]: resolved 1 certificate(s)
2022-01-25 15:03:00 DEBUG Shibboleth.SSO.SAML2 [108815] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_43943de7ff56c8d7ba5f66bc56b6e9a1" IssueInstant="2022-01-25T15:02:58.852Z" Version="2.0"><saml2:Issuer>https://gluu2.pubsec.ukfast.team/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://gluu2.pubsec.ukfast.team/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQxnEHkc5EiIpQI210c5kiapgabGlshXOrl6lO34B3PVLb2Fon01hzCjhejJF8vRks6sjc62Z2UoHuq39YjjMsZv4jDxIaSYTKrvNAEHP0Fh3aIeRc5OLpMEO7qGQ==</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="80.244.179.100" InResponseTo="_f8c34efcc771d34a9f06ff9986420eba" NotOnOrAfter="2022-01-25T15:07:58.948Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2022-01-25T15:02:58.852Z" NotOnOrAfter="2022-01-25T15:07:58.852Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2022-01-25T15:02:58.484Z" SessionIndex="_8f3c5bfc5f1f8337fa31c5c6b70130c7"><saml2:SubjectLocality Address="80.244.179.100"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">JDoe@gluutraininglab.com</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">JDoe</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2022-01-25 15:03:00 DEBUG Shibboleth.SSO.SAML2 [108815] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108815] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108815] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:03:00 DEBUG XMLTooling.StorageService [108815] [default]: inserted record (_43943de7ff56c8d7ba5f66bc56b6e9a1) in context (MessageFlow) with expiration (1643123218)
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108815] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:03:00 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108815] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:03:00 DEBUG Shibboleth.SSO.SAML2 [108815] [default]: SSO profile processing completed successfully
2022-01-25 15:03:00 DEBUG Shibboleth.SSO.SAML2 [108815] [default]: extracting pushed attributes...
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeExtractor.XML [108815] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeExtractor.XML [108815] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeExtractor.XML [108815] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeDecoder.String [108815] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeDecoder.String [108815] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeFilter [108815] [default]: filtering 2 attribute(s) from (https://gluu2.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeFilter [108815] [default]: applying filtering rule(s) for attribute (uid) from (https://gluu2.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:03:00 DEBUG Shibboleth.AttributeFilter [108815] [default]: applying filtering rule(s) for attribute (mail) from (https://gluu2.pubsec.ukfast.team/idp/shibboleth)
2022-01-25 15:03:00 DEBUG Shibboleth.SessionCache [108815] [default]: creating new session
2022-01-25 15:03:00 DEBUG Shibboleth.SessionCache [108815] [default]: storing new session...
2022-01-25 15:03:00 DEBUG XMLTooling.StorageService [108815] [default]: inserted record (session) in context (_bc2ddce85683b7c231453d2f911669a6) with expiration (1643126580)
2022-01-25 15:03:00 DEBUG XMLTooling.StorageService [108815] [default]: inserted record (AAdzZWNyZXQxnEHkc5EiIpQI210c5kiapgabGlshXOrl6lO34B3PVLb2Fon01hzCjhejJF8vRks6sjc62Z2UoHuq39YjjMsZv4jDxIaSYTKrvNAEHP0Fh3aIeRc5OLpMEO7qGQ==) in context (NameID) with expiration (1643151780)
2022-01-25 15:03:00 INFO Shibboleth.SessionCache [108815] [default]: new session created: ID (_bc2ddce85683b7c231453d2f911669a6) IdP (https://gluu2.pubsec.ukfast.team/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.22.242)
2022-01-25 15:03:00 DEBUG XMLTooling.StorageService [108815] [default]: deleted record (6f49bc156a4f95d47e8ad838ea03c275273b1396bc35642734cb4d269866b2e4) in context (RelayState)
2022-01-25 15:03:00 DEBUG Shibboleth.SSO.SAML2 [108815] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:03:00 DEBUG Shibboleth.Listener [108815]: dispatching message (default::getHeaders::Application)
2022-01-25 15:03:00 DEBUG Shibboleth.Listener [108815] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:03:00 DEBUG XMLTooling.StorageService [108815] [default]: updated expiration of valid records in context (_bc2ddce85683b7c231453d2f911669a6) to (1643126580)
2022-01-25 15:03:01 DEBUG Shibboleth.Listener [108815] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:03:01 DEBUG XMLTooling.StorageService [108815] [default]: updated expiration of valid records in context (_bc2ddce85683b7c231453d2f911669a6) to (1643126581)
2022-01-25 15:03:08 INFO Shibboleth.Listener [108810]: detected socket closure, shutting down worker thread
2022-01-25 15:03:47 INFO Shibboleth.Listener [108814]: detected socket closure, shutting down worker thread
2022-01-25 15:04:08 INFO Shibboleth.Listener [108813]: detected socket closure, shutting down worker thread
2022-01-25 15:04:31 DEBUG Shibboleth.Listener [108816]: dispatching message (default::getHeaders::Application)
2022-01-25 15:04:31 DEBUG Shibboleth.Listener [108816] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:04:31 DEBUG XMLTooling.StorageService [108816] [default]: inserted record (a2b6a5efc9acddac837669c7f75e2824e527a64356ef02f2c4b2d41dec1b33f6) in context (RelayState) with expiration (1643123671)
2022-01-25 15:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108816] [default]: validating input
2022-01-25 15:04:31 DEBUG OpenSAML.MessageEncoder.SAML2 [108816] [default]: tracking request (_938ced7b25d21f6c2361c345544a03f6) against RelayState token (ss:mem:a2b6a5efc9acddac837669c7f75e2824e527a64356ef02f2c4b2d41dec1b33f6)
2022-01-25 15:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108816] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108816] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_938ced7b25d21f6c2361c345544a03f6" IssueInstant="2022-01-25T15:04:31Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108816] [default]: message encoded, sending redirect to client
2022-01-25 15:05:10 INFO Shibboleth.Listener [108815]: detected socket closure, shutting down worker thread
2022-01-25 15:06:54 DEBUG Shibboleth.Listener [108817]: dispatching message (default::getHeaders::Application)
2022-01-25 15:06:54 DEBUG Shibboleth.Listener [108817] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:06:54 DEBUG XMLTooling.StorageService [108817] [default]: updated expiration of valid records in context (_bc2ddce85683b7c231453d2f911669a6) to (1643126814)
2022-01-25 15:08:07 DEBUG Shibboleth.Listener [108818]: dispatching message (default::getHeaders::Application)
2022-01-25 15:08:07 DEBUG Shibboleth.Listener [108818] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:08:07 DEBUG XMLTooling.StorageService [108818] [default]: updated expiration of valid records in context (_bc2ddce85683b7c231453d2f911669a6) to (1643126887)
2022-01-25 15:08:07 DEBUG Shibboleth.Listener [108818] [default]: dispatching message (remove::StorageService::SessionCache)
2022-01-25 15:08:07 INFO Shibboleth.SessionCache [108818] [default]: removed session (_bc2ddce85683b7c231453d2f911669a6)
2022-01-25 15:08:07 DEBUG Shibboleth.Listener [108818] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:08:07 DEBUG XMLTooling.StorageService [108818] [default]: inserted record (5bdea00234755dc8946dec211b9da64df3d329b50b55228388e7488b8b925347) in context (RelayState) with expiration (1643123887)
2022-01-25 15:08:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108818] [default]: validating input
2022-01-25 15:08:07 DEBUG OpenSAML.MessageEncoder.SAML2 [108818] [default]: tracking request (_7539f636b392f7e8737eb5b57dd14192) against RelayState token (ss:mem:5bdea00234755dc8946dec211b9da64df3d329b50b55228388e7488b8b925347)
2022-01-25 15:08:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108818] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:08:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108818] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_7539f636b392f7e8737eb5b57dd14192" IssueInstant="2022-01-25T15:08:07Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:08:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108818] [default]: message encoded, sending redirect to client
2022-01-25 15:08:52 INFO Shibboleth.Listener [108816]: detected socket closure, shutting down worker thread
2022-01-25 15:10:37 INFO XMLTooling.StorageService : purged 31 expired record(s) from storage
2022-01-25 15:12:17 INFO Shibboleth.Listener [108818]: detected socket closure, shutting down worker thread
2022-01-25 15:14:40 DEBUG Shibboleth.Listener [108819] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:14:40 INFO OpenSAML.MetadataProvider.Dynamic [108819] [default]: resolving metadata for (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:14:40 INFO OpenSAML.MetadataProvider.Dynamic [108819] [default]: caching resolved metadata for (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:14:40 INFO OpenSAML.MetadataProvider.Dynamic [108819] [default]: next refresh of metadata for (http://hcm.tstarns.com:18080/am2) no sooner than 28800 seconds
2022-01-25 15:14:40 DEBUG XMLTooling.StorageService [108819] [default]: inserted record (1d2b79cb90e9d47228861c37268f899f051a61abd8a00f86bd698bf564892ff9) in context (RelayState) with expiration (1643124280)
2022-01-25 15:14:40 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: validating input
2022-01-25 15:14:40 DEBUG OpenSAML.MessageEncoder.SAML2 [108819] [default]: tracking request (_4dcb677f89f8438a0741463ee6ed2356) against RelayState token (ss:mem:1d2b79cb90e9d47228861c37268f899f051a61abd8a00f86bd698bf564892ff9)
2022-01-25 15:14:40 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:14:40 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="http://hcm.tstarns.com:18080/am2/SSORedirect/metaAlias/testUsers/idp" ID="_4dcb677f89f8438a0741463ee6ed2356" IssueInstant="2022-01-25T15:14:40Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:14:40 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: message encoded, sending redirect to client
2022-01-25 15:14:43 DEBUG Shibboleth.Listener [108819] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:14:43 DEBUG XMLTooling.StorageService [108819] [default]: inserted record (4b645334de66118898837233d9fb58f52d8ff4645691d365ce5ce69daf86c948) in context (RelayState) with expiration (1643124283)
2022-01-25 15:14:43 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: validating input
2022-01-25 15:14:43 DEBUG OpenSAML.MessageEncoder.SAML2 [108819] [default]: tracking request (_b201b2e8d6fb222788e7d799e6c19856) against RelayState token (ss:mem:4b645334de66118898837233d9fb58f52d8ff4645691d365ce5ce69daf86c948)
2022-01-25 15:14:43 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:14:43 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="http://hcm.tstarns.com:18080/am2/SSORedirect/metaAlias/testUsers/idp" ID="_b201b2e8d6fb222788e7d799e6c19856" IssueInstant="2022-01-25T15:14:43Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:14:43 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108819] [default]: message encoded, sending redirect to client
2022-01-25 15:14:53 DEBUG Shibboleth.Listener [108820] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:14:53 DEBUG OpenSAML.MessageDecoder.SAML2POST [108820] [default]: validating input
2022-01-25 15:14:53 DEBUG OpenSAML.MessageDecoder.SAML2POST [108820] [default]: decoded SAML message:
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="s2ed48132ff8fc4de5f0505ee82a109b30832d1dcc" InResponseTo="_b201b2e8d6fb222788e7d799e6c19856" Version="2.0" IssueInstant="2022-01-25T15:14:53Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://hcm.tstarns.com:18080/am2</saml:Issuer><samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<samlp:StatusCode xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Value="urn:oasis:names:tc:SAML:2.0:status:Success">
</samlp:StatusCode>
</samlp:Status><saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="s2b53e42ae685e6154e20786bbac085b8fe110a733" IssueInstant="2022-01-25T15:14:53Z" Version="2.0">
<saml:Issuer>http://hcm.tstarns.com:18080/am2</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#s2b53e42ae685e6154e20786bbac085b8fe110a733"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>mU6LkxXFpld8HGxsX4XuxP3AUOL7LX6h5UR8rckMRlQ=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>aDr9fSA/rH8afupNxEsWRdBu4ARUXWQ8Ul6OMevr124Ze0ynlsp+14QhCuwN0ReyFDh9vcrk62ogcVSJYDjwAbuf+CO9X6bu9Im2FB4JqxrRQRiyV0tRPlYEyCANXhLUIZa1o6T8pYpNaFXJ4Ctt4I90x6FTC3KXbnpb1SonLx4c8iNjkyJxHyJeNucHR2cMcjH76oUTsGPIEgIbfzkdVmcTmIgETpJHhG10V40rC+/6MCeYDt8kkCv7JT6NsWksMAoVs7M3sMk5tpVvWEfCgXfpKgJAIhSmj/KyyqHLQLWUy7+36b1VxtPB0od3Hv3sro0NjNVHzmMdMdl8ifDzOg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject>
<saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="http://hcm.tstarns.com:18080/am2" SPNameQualifier="https://samltest.id/saml/sp">j+r0JP1WS3MSDbtja8pqoS0Phw0T</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml:SubjectConfirmationData InResponseTo="_b201b2e8d6fb222788e7d799e6c19856" NotOnOrAfter="2022-01-25T15:24:53Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml:SubjectConfirmation>
</saml:Subject><saml:Conditions NotBefore="2022-01-25T15:04:53Z" NotOnOrAfter="2022-01-25T15:24:53Z">
<saml:AudienceRestriction>
<saml:Audience>https://samltest.id/saml/sp</saml:Audience>
</saml:AudienceRestriction>
</saml:Conditions>
<saml:AuthnStatement AuthnInstant="2022-01-25T15:14:51Z" SessionIndex="s246f7fc292475df768086dc7a64145ef6748bc401"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
2022-01-25 15:14:53 DEBUG OpenSAML.MessageDecoder.SAML2 [108820] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:14:53 DEBUG OpenSAML.MessageDecoder.SAML2 [108820] [default]: message from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:14:53 DEBUG OpenSAML.MessageDecoder.SAML2 [108820] [default]: searching metadata for message issuer...
2022-01-25 15:14:53 DEBUG OpenSAML.MessageDecoder.SAML2 [108820] [default]: recovered request/response correlation value (_b201b2e8d6fb222788e7d799e6c19856)
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108820] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108820] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:14:53 DEBUG XMLTooling.StorageService [108820] [default]: inserted record (s2ed48132ff8fc4de5f0505ee82a109b30832d1dcc) in context (MessageFlow) with expiration (1643123933)
2022-01-25 15:14:53 DEBUG Shibboleth.SSO.SAML2 [108820] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:14:53 DEBUG Shibboleth.SSO.SAML2 [108820] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108820] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108820] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:14:53 DEBUG XMLTooling.StorageService [108820] [default]: inserted record (s2b53e42ae685e6154e20786bbac085b8fe110a733) in context (MessageFlow) with expiration (1643123933)
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108820] [default]: validating signature profile
2022-01-25 15:14:53 DEBUG XMLTooling.KeyInfoResolver.Inline [108820] [default]: resolving ds:X509Certificate
2022-01-25 15:14:53 DEBUG XMLTooling.KeyInfoResolver.Inline [108820] [default]: resolved 1 certificate(s)
2022-01-25 15:14:53 DEBUG XMLTooling.KeyInfoResolver.Inline [108820] [default]: resolved 0 CRL(s)
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108820] [default]: signature verified against message issuer
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108820] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:14:53 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108820] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:14:53 DEBUG Shibboleth.SSO.SAML2 [108820] [default]: SSO profile processing completed successfully
2022-01-25 15:14:53 DEBUG Shibboleth.SSO.SAML2 [108820] [default]: extracting pushed attributes...
2022-01-25 15:14:53 DEBUG Shibboleth.AttributeExtractor.XML [108820] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2022-01-25 15:14:53 DEBUG Shibboleth.AttributeDecoder.NameID [108820] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2022-01-25 15:14:53 DEBUG Shibboleth.AttributeExtractor.XML [108820] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2022-01-25 15:14:53 DEBUG Shibboleth.AttributeFilter [108820] [default]: filtering 1 attribute(s) from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:14:53 DEBUG Shibboleth.AttributeFilter [108820] [default]: applying filtering rule(s) for attribute (persistent-id) from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:14:53 DEBUG Shibboleth.SessionCache [108820] [default]: creating new session
2022-01-25 15:14:53 DEBUG Shibboleth.SessionCache [108820] [default]: storing new session...
2022-01-25 15:14:53 DEBUG XMLTooling.StorageService [108820] [default]: inserted record (session) in context (_d129144134309ae888a2e9605f3a3b50) with expiration (1643127293)
2022-01-25 15:14:53 DEBUG XMLTooling.StorageService [108820] [default]: inserted record (j+r0JP1WS3MSDbtja8pqoS0Phw0T) in context (NameID) with expiration (1643152493)
2022-01-25 15:14:53 INFO Shibboleth.SessionCache [108820] [default]: new session created: ID (_d129144134309ae888a2e9605f3a3b50) IdP (http://hcm.tstarns.com:18080/am2) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.5.45)
2022-01-25 15:14:53 DEBUG XMLTooling.StorageService [108820] [default]: deleted record (4b645334de66118898837233d9fb58f52d8ff4645691d365ce5ce69daf86c948) in context (RelayState)
2022-01-25 15:14:53 DEBUG Shibboleth.SSO.SAML2 [108820] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:14:53 DEBUG Shibboleth.Listener [108820]: dispatching message (default::getHeaders::Application)
2022-01-25 15:14:53 DEBUG Shibboleth.Listener [108820] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:14:53 DEBUG XMLTooling.StorageService [108820] [default]: updated expiration of valid records in context (_d129144134309ae888a2e9605f3a3b50) to (1643127293)
2022-01-25 15:14:54 DEBUG Shibboleth.Listener [108820] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:14:54 DEBUG XMLTooling.StorageService [108820] [default]: updated expiration of valid records in context (_d129144134309ae888a2e9605f3a3b50) to (1643127294)
2022-01-25 15:14:54 INFO Shibboleth.Listener [108817]: detected socket closure, shutting down worker thread
2022-01-25 15:15:22 DEBUG Shibboleth.Listener [108821] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:15:22 DEBUG OpenSAML.MessageDecoder.SAML2POST [108821] [default]: validating input
2022-01-25 15:15:22 DEBUG OpenSAML.MessageDecoder.SAML2POST [108821] [default]: decoded SAML message:
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="s24092a4455c1ae33423fec9735e51e5423e408d90" Version="2.0" IssueInstant="2022-01-25T15:15:22Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://hcm.tstarns.com:18080/am2</saml:Issuer><samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<samlp:StatusCode xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Value="urn:oasis:names:tc:SAML:2.0:status:Success">
</samlp:StatusCode>
</samlp:Status><saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="s2ec18562fa41524dbcd3902babcb33627784ada3b" IssueInstant="2022-01-25T15:15:22Z" Version="2.0">
<saml:Issuer>http://hcm.tstarns.com:18080/am2</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#s2ec18562fa41524dbcd3902babcb33627784ada3b"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>GXXu7emMaGIN88VHh9ej0IPDgFEr31HN5evFm4qLatM=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>UotWWka4Z36LeTILB/RCJZ/VI3DOjSqI05C0NUaY+AgVgNly2/7z9IG55P6DI0QlwyxD1vv85oQfQcWePtAHc8FahRwuifk9eNIdMj3mn1GQz/3URbVh8S9Qf4XswVJLlJhOrNsPZbAPTFlD8MqGh/4XNSfCcT2gy5364u1lpkpIm6i2sbjFkRzabV/tO8sEgo6wGedhb2KMYrJSmorURPwotUYHAmgrp9UFQhOdNSQNv2X8VvtjNfvgBLbdPx7tmb0hqHirIrrgLoggg+iWuEzPDud6Sud92nEuJovaL7R6pOzz3j8FhxXXVDkyzJGkaeHfwmW8oQwcsRUmiSBPlg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject>
<saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="http://hcm.tstarns.com:18080/am2" SPNameQualifier="https://samltest.id/saml/sp">j+r0JP1WS3MSDbtja8pqoS0Phw0T</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml:SubjectConfirmationData NotOnOrAfter="2022-01-25T15:25:22Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml:SubjectConfirmation>
</saml:Subject><saml:Conditions NotBefore="2022-01-25T15:05:22Z" NotOnOrAfter="2022-01-25T15:25:22Z">
<saml:AudienceRestriction>
<saml:Audience>https://samltest.id/saml/sp</saml:Audience>
</saml:AudienceRestriction>
</saml:Conditions>
<saml:AuthnStatement AuthnInstant="2022-01-25T15:14:51Z" SessionIndex="s246f7fc292475df768086dc7a64145ef6748bc401"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
2022-01-25 15:15:22 DEBUG OpenSAML.MessageDecoder.SAML2 [108821] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:15:22 DEBUG OpenSAML.MessageDecoder.SAML2 [108821] [default]: message from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:15:22 DEBUG OpenSAML.MessageDecoder.SAML2 [108821] [default]: searching metadata for message issuer...
2022-01-25 15:15:22 DEBUG OpenSAML.MessageDecoder.SAML2 [108821] [default]: no RelayState, unable to search for request/response correlation cookie
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108821] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108821] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:15:22 DEBUG XMLTooling.StorageService [108821] [default]: inserted record (s24092a4455c1ae33423fec9735e51e5423e408d90) in context (MessageFlow) with expiration (1643123962)
2022-01-25 15:15:22 DEBUG Shibboleth.SSO.SAML2 [108821] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:15:22 DEBUG Shibboleth.SSO.SAML2 [108821] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108821] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108821] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:15:22 DEBUG XMLTooling.StorageService [108821] [default]: inserted record (s2ec18562fa41524dbcd3902babcb33627784ada3b) in context (MessageFlow) with expiration (1643123962)
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108821] [default]: validating signature profile
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108821] [default]: signature verified against message issuer
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108821] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:15:22 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108821] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:15:22 DEBUG Shibboleth.SSO.SAML2 [108821] [default]: SSO profile processing completed successfully
2022-01-25 15:15:22 DEBUG Shibboleth.SSO.SAML2 [108821] [default]: extracting pushed attributes...
2022-01-25 15:15:22 DEBUG Shibboleth.AttributeExtractor.XML [108821] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2022-01-25 15:15:22 DEBUG Shibboleth.AttributeDecoder.NameID [108821] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2022-01-25 15:15:22 DEBUG Shibboleth.AttributeExtractor.XML [108821] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2022-01-25 15:15:22 DEBUG Shibboleth.AttributeFilter [108821] [default]: filtering 1 attribute(s) from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:15:22 DEBUG Shibboleth.AttributeFilter [108821] [default]: applying filtering rule(s) for attribute (persistent-id) from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:15:22 DEBUG Shibboleth.SessionCache [108821] [default]: creating new session
2022-01-25 15:15:22 DEBUG Shibboleth.SessionCache [108821] [default]: storing new session...
2022-01-25 15:15:22 DEBUG XMLTooling.StorageService [108821] [default]: inserted record (session) in context (_88691ed3419b137611d44a03971d3604) with expiration (1643127322)
2022-01-25 15:15:22 DEBUG XMLTooling.StorageService [108821] [default]: updated record (j+r0JP1WS3MSDbtja8pqoS0Phw0T) in context (NameID) with expiration (1643152522)
2022-01-25 15:15:22 INFO Shibboleth.SessionCache [108821] [default]: new session created: ID (_88691ed3419b137611d44a03971d3604) IdP (http://hcm.tstarns.com:18080/am2) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.5.45)
2022-01-25 15:15:22 DEBUG Shibboleth.SSO.SAML2 [108821] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:15:22 DEBUG Shibboleth.Listener [108821]: dispatching message (default::getHeaders::Application)
2022-01-25 15:15:22 DEBUG Shibboleth.Listener [108821] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:15:22 DEBUG XMLTooling.StorageService [108821] [default]: updated expiration of valid records in context (_88691ed3419b137611d44a03971d3604) to (1643127322)
2022-01-25 15:15:22 DEBUG Shibboleth.Listener [108821] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:15:22 DEBUG XMLTooling.StorageService [108821] [default]: updated expiration of valid records in context (_88691ed3419b137611d44a03971d3604) to (1643127322)
2022-01-25 15:19:16 INFO Shibboleth.Listener [108820]: detected socket closure, shutting down worker thread
2022-01-25 15:20:42 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2022-01-25 15:20:43 INFO Shibboleth.Listener [108821]: detected socket closure, shutting down worker thread
2022-01-25 15:21:07 INFO Shibboleth.Listener [108819]: detected socket closure, shutting down worker thread
2022-01-25 15:21:28 DEBUG Shibboleth.Listener [108822] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:21:28 DEBUG OpenSAML.MessageDecoder.SAML2POST [108822] [default]: validating input
2022-01-25 15:21:28 WARN Shibboleth.SSO.SAML2 [108822] [default]: error processing incoming assertion: Invalid HTTP method (HEAD).
2022-01-25 15:21:29 DEBUG Shibboleth.Listener [108823]: dispatching message (default::getHeaders::Application)
2022-01-25 15:21:29 DEBUG Shibboleth.Listener [108823] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:21:29 DEBUG XMLTooling.StorageService [108823] [default]: inserted record (20cc6c43d28a53286de9c46507552d130cd62cd70e7d9018c9118347fef1f9e5) in context (RelayState) with expiration (1643124689)
2022-01-25 15:21:29 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108823] [default]: validating input
2022-01-25 15:21:29 DEBUG OpenSAML.MessageEncoder.SAML2 [108823] [default]: tracking request (_898cc594923e9e053c6ba23573338746) against RelayState token (ss:mem:20cc6c43d28a53286de9c46507552d130cd62cd70e7d9018c9118347fef1f9e5)
2022-01-25 15:21:29 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108823] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:21:29 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108823] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_898cc594923e9e053c6ba23573338746" IssueInstant="2022-01-25T15:21:29Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:21:29 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108823] [default]: message encoded, sending redirect to client
2022-01-25 15:21:57 INFO Shibboleth.Listener [108822]: detected socket closure, shutting down worker thread
2022-01-25 15:25:37 INFO XMLTooling.StorageService : purged 7 expired record(s) from storage
2022-01-25 15:26:25 INFO Shibboleth.Listener [108823]: detected socket closure, shutting down worker thread
2022-01-25 15:34:31 DEBUG Shibboleth.Listener [108824]: dispatching message (default::getHeaders::Application)
2022-01-25 15:34:31 DEBUG Shibboleth.Listener [108824] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:34:31 DEBUG XMLTooling.StorageService [108824] [default]: inserted record (8ba22c603fa6ec65bc88e30980ac9ef6e6ac3c8e09c164311880e31e72726533) in context (RelayState) with expiration (1643125471)
2022-01-25 15:34:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108824] [default]: validating input
2022-01-25 15:34:31 DEBUG OpenSAML.MessageEncoder.SAML2 [108824] [default]: tracking request (_20190ca349ca481a4539d9d61a9b4f17) against RelayState token (ss:mem:8ba22c603fa6ec65bc88e30980ac9ef6e6ac3c8e09c164311880e31e72726533)
2022-01-25 15:34:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108824] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:34:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108824] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_20190ca349ca481a4539d9d61a9b4f17" IssueInstant="2022-01-25T15:34:31Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:34:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108824] [default]: message encoded, sending redirect to client
2022-01-25 15:36:14 INFO Shibboleth.Listener [108824]: detected socket closure, shutting down worker thread
2022-01-25 15:40:37 INFO XMLTooling.StorageService : purged 5 expired record(s) from storage
2022-01-25 15:40:45 DEBUG Shibboleth.Listener [108825] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:40:45 INFO OpenSAML.MetadataProvider.Dynamic [108825] [default]: resolving metadata for (https://keycloak.odin.ukfast.team/auth/realms/ODIN)
2022-01-25 15:40:45 INFO OpenSAML.MetadataProvider.Dynamic [108825] [default]: caching resolved metadata for (https://keycloak.odin.ukfast.team/auth/realms/ODIN)
2022-01-25 15:40:45 INFO OpenSAML.MetadataProvider.Dynamic [108825] [default]: next refresh of metadata for (https://keycloak.odin.ukfast.team/auth/realms/ODIN) no sooner than 28800 seconds
2022-01-25 15:40:45 DEBUG XMLTooling.StorageService [108825] [default]: inserted record (a5caf052c7b9e122175c54789256141a8bb9b65e036da0066fe19f2039ecd29e) in context (RelayState) with expiration (1643125845)
2022-01-25 15:40:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108825] [default]: validating input
2022-01-25 15:40:45 DEBUG OpenSAML.MessageEncoder.SAML2 [108825] [default]: tracking request (_12b0af4db5c5db98d3638b39c623ad8c) against RelayState token (ss:mem:a5caf052c7b9e122175c54789256141a8bb9b65e036da0066fe19f2039ecd29e)
2022-01-25 15:40:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108825] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:40:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108825] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://keycloak.odin.ukfast.team/auth/realms/ODIN/protocol/saml" ID="_12b0af4db5c5db98d3638b39c623ad8c" IssueInstant="2022-01-25T15:40:45Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:40:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108825] [default]: signing the message
2022-01-25 15:40:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108825] [default]: message encoded, sending redirect to client
2022-01-25 15:41:09 DEBUG Shibboleth.Listener [108826] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:41:09 DEBUG OpenSAML.MessageDecoder.SAML2POST [108826] [default]: validating input
2022-01-25 15:41:09 DEBUG OpenSAML.MessageDecoder.SAML2POST [108826] [default]: decoded SAML message:
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="ID_b2737788-17a4-40a7-9c14-a2ba4560c107" InResponseTo="_12b0af4db5c5db98d3638b39c623ad8c" IssueInstant="2022-01-25T15:41:04.603Z" Version="2.0"><saml:Issuer>https://keycloak.odin.ukfast.team/auth/realms/ODIN</saml:Issuer><dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><dsig:Reference URI="#ID_b2737788-17a4-40a7-9c14-a2ba4560c107"><dsig:Transforms><dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></dsig:Transforms><dsig:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><dsig:DigestValue>7i/uCgq38FNBw0s4+mrktv1MxluucFoR0xSLbKYtzUU=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>FtsQNTgxOXygnw9ipOqq25nAdAcbRjIm1jPsFWorwnWMLpppNOLugQhP7ly5mkopFwd1uhlWTjQJ+CEz9QKifzs7iWJLvLQegJbkqm+q/GPnsQ44YUl4aBLg0twyElz7gxDOylPcEgRrDtGbIkTXIjO/Qz22lc9p10eppFMDndCjbhuWgisSgJr+W87AXZKOG8w/EgVkFsgTtMBfmf8hsP3Znp7dY3bOI9bJaUX47hR4NPqRkiNJPN2RKek9YDQLcwUx7URSxpi9ZX8VelLAB3JN1jsp3+48F5R/Zsa8zHSNLHXC8uB1hZmKe8pENLKIc+UyJxk6mKzNzYLOzWMHKQ==</dsig:SignatureValue><dsig:KeyInfo><dsig:KeyName>OaK8kwyEwpqNLfWXYA2-LZmW6Qd314fuYRIcYHra068</dsig:KeyName><dsig:X509Data><dsig:X509Certificate>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</dsig:X509Certificate></dsig:X509Data><dsig:KeyValue><dsig:RSAKeyValue><dsig:Modulus>ubbRMTdn/1jQFVpjqQufxe4ahZpUreQcHWKT+DtOeIB560Peu7MmwezmR39vjxsDiyruHZcdjRXA4WXPZQqQ2lvgfcvlZZqgW3T/+pUHcp3hdAq9mCMwqtz5TdN/89uX/PoKaMRM+HaqisI80Ws9RTXkuVhSK3/XB3eWVaWuDkL4UmTZOHIEv399lpUntGnmasU6WOnVD639gemtKMCeNTO849GqzkMaLcxG0mH3Hw5fLDG1GtD+62pAdinTKatJskgNaHYAe/gj+55AgvBkmRclMLl8qozWCGB6ek3lk8ScKtqICmbM79XzwGrHmBJOY3P9SSHHJ+ORuxrDwouIbw==</dsig:Modulus><dsig:Exponent>AQAB</dsig:Exponent></dsig:RSAKeyValue></dsig:KeyValue></dsig:KeyInfo></dsig:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:EncryptedAssertion><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><xenc:CipherData><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml:EncryptedAssertion></samlp:Response>
2022-01-25 15:41:09 DEBUG OpenSAML.MessageDecoder.SAML2 [108826] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:41:09 DEBUG OpenSAML.MessageDecoder.SAML2 [108826] [default]: message from (https://keycloak.odin.ukfast.team/auth/realms/ODIN)
2022-01-25 15:41:09 DEBUG OpenSAML.MessageDecoder.SAML2 [108826] [default]: searching metadata for message issuer...
2022-01-25 15:41:09 DEBUG OpenSAML.MessageDecoder.SAML2 [108826] [default]: recovered request/response correlation value (_12b0af4db5c5db98d3638b39c623ad8c)
2022-01-25 15:41:09 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108826] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:41:09 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108826] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:41:09 DEBUG XMLTooling.StorageService [108826] [default]: inserted record (ID_b2737788-17a4-40a7-9c14-a2ba4560c107) in context (MessageFlow) with expiration (1643125504)
2022-01-25 15:41:09 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108826] [default]: validating signature profile
2022-01-25 15:41:09 DEBUG XMLTooling.KeyInfoResolver.Inline [108826] [default]: resolving ds:X509Certificate
2022-01-25 15:41:09 DEBUG XMLTooling.KeyInfoResolver.Inline [108826] [default]: resolved 1 certificate(s)
2022-01-25 15:41:09 DEBUG XMLTooling.KeyInfoResolver.Inline [108826] [default]: resolved 0 CRL(s)
2022-01-25 15:41:09 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108826] [default]: signature verified against message issuer
2022-01-25 15:41:09 DEBUG Shibboleth.SSO.SAML2 [108826] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:41:09 DEBUG XMLTooling.KeyInfoResolver.Inline [108826] [default]: resolved 0 certificate(s)
2022-01-25 15:41:10 DEBUG Shibboleth.SSO.SAML2 [108826] [default]: decrypted Assertion: <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="ID_75f21841-b53e-44c2-b6e6-4c132461ad33" IssueInstant="2022-01-25T15:41:04.603Z" Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"><saml:Issuer>https://keycloak.odin.ukfast.team/auth/realms/ODIN</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">oneedham</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData InResponseTo="_12b0af4db5c5db98d3638b39c623ad8c" NotOnOrAfter="2022-01-25T15:46:02.603Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2022-01-25T15:41:02.603Z" NotOnOrAfter="2022-01-25T15:42:02.603Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2022-01-25T15:41:04.603Z" SessionIndex="ea98be60-fa51-4a06-9048-77f0ac507813::30859a4b-7a8a-4f76-81b1-5f482a1ebd9c" SessionNotOnOrAfter="2022-01-26T01:41:04.603Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">offline_access</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">default-roles-odin</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">manage-account-links</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">uma_authorization</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">view-profile</saml:AttributeValue></saml:Attribute><saml:Attribute Name="Role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">manage-account</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion>
2022-01-25 15:41:10 DEBUG Shibboleth.SSO.SAML2 [108826] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:41:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108826] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:41:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108826] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:41:10 DEBUG XMLTooling.StorageService [108826] [default]: inserted record (ID_75f21841-b53e-44c2-b6e6-4c132461ad33) in context (MessageFlow) with expiration (1643125504)
2022-01-25 15:41:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108826] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:41:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108826] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:41:10 DEBUG Shibboleth.SSO.SAML2 [108826] [default]: SSO profile processing completed successfully
2022-01-25 15:41:10 DEBUG Shibboleth.SSO.SAML2 [108826] [default]: extracting pushed attributes...
2022-01-25 15:41:10 DEBUG Shibboleth.AttributeExtractor.XML [108826] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2022-01-25 15:41:10 DEBUG Shibboleth.AttributeExtractor.XML [108826] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2022-01-25 15:41:10 DEBUG Shibboleth.AttributeExtractor.XML [108826] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2022-01-25 15:41:10 INFO Shibboleth.AttributeExtractor.XML [108826] [default]: skipping SAML 2.0 Attribute with Name: Role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2022-01-25 15:41:10 INFO Shibboleth.AttributeExtractor.XML [108826] [default]: skipping SAML 2.0 Attribute with Name: Role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2022-01-25 15:41:10 INFO Shibboleth.AttributeExtractor.XML [108826] [default]: skipping SAML 2.0 Attribute with Name: Role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2022-01-25 15:41:10 INFO Shibboleth.AttributeExtractor.XML [108826] [default]: skipping SAML 2.0 Attribute with Name: Role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2022-01-25 15:41:10 INFO Shibboleth.AttributeExtractor.XML [108826] [default]: skipping SAML 2.0 Attribute with Name: Role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2022-01-25 15:41:10 INFO Shibboleth.AttributeExtractor.XML [108826] [default]: skipping SAML 2.0 Attribute with Name: Role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2022-01-25 15:41:10 DEBUG Shibboleth.SessionCache [108826] [default]: creating new session
2022-01-25 15:41:10 DEBUG Shibboleth.SessionCache [108826] [default]: storing new session...
2022-01-25 15:41:10 DEBUG XMLTooling.StorageService [108826] [default]: inserted record (session) in context (_6e8ca8dfcdec63430d9d3461ce5efcb2) with expiration (1643128870)
2022-01-25 15:41:10 DEBUG XMLTooling.StorageService [108826] [default]: inserted record (oneedham) in context (NameID) with expiration (1643154069)
2022-01-25 15:41:10 INFO Shibboleth.SessionCache [108826] [default]: new session created: ID (_6e8ca8dfcdec63430d9d3461ce5efcb2) IdP (https://keycloak.odin.ukfast.team/auth/realms/ODIN) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.22.242)
2022-01-25 15:41:10 DEBUG XMLTooling.StorageService [108826] [default]: deleted record (a5caf052c7b9e122175c54789256141a8bb9b65e036da0066fe19f2039ecd29e) in context (RelayState)
2022-01-25 15:41:10 DEBUG Shibboleth.SSO.SAML2 [108826] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:41:10 DEBUG Shibboleth.Listener [108826]: dispatching message (default::getHeaders::Application)
2022-01-25 15:41:10 DEBUG Shibboleth.Listener [108826] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:41:10 DEBUG XMLTooling.StorageService [108826] [default]: updated expiration of valid records in context (_6e8ca8dfcdec63430d9d3461ce5efcb2) to (1643128870)
2022-01-25 15:41:10 DEBUG Shibboleth.Listener [108826] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:41:10 DEBUG XMLTooling.StorageService [108826] [default]: updated expiration of valid records in context (_6e8ca8dfcdec63430d9d3461ce5efcb2) to (1643128870)
2022-01-25 15:42:25 INFO Shibboleth.Listener [108825]: detected socket closure, shutting down worker thread
2022-01-25 15:44:36 DEBUG Shibboleth.Listener [108827] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:44:36 INFO OpenSAML.MetadataProvider.Dynamic [108827] [default]: resolving metadata for (https://sentryidp.identitycheckpoint.com/api/IdP/1)
2022-01-25 15:44:36 ERROR OpenSAML.MetadataProvider.Dynamic [108827] [default]: error while resolving (https://sentryidp.identitycheckpoint.com/api/IdP/1): Metadata was already invalid at the time of retrieval.
2022-01-25 15:44:36 WARN Shibboleth.SessionInitiator.SAML2 [108827] [default]: unable to locate metadata for provider (https://sentryidp.identitycheckpoint.com/api/IdP/1)
2022-01-25 15:48:48 INFO Shibboleth.Listener [108826]: detected socket closure, shutting down worker thread
2022-01-25 15:48:49 INFO Shibboleth.Listener [108827]: detected socket closure, shutting down worker thread
2022-01-25 15:50:41 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2022-01-25 15:52:19 DEBUG Shibboleth.Listener [108828] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:52:19 INFO OpenSAML.MetadataProvider.Dynamic [108828] [default]: resolving metadata for (https://ssomis.dev.nyiso.com/idp)
2022-01-25 15:52:19 INFO OpenSAML.MetadataProvider.Dynamic [108828] [default]: caching resolved metadata for (https://ssomis.dev.nyiso.com/idp)
2022-01-25 15:52:19 INFO OpenSAML.MetadataProvider.Dynamic [108828] [default]: next refresh of metadata for (https://ssomis.dev.nyiso.com/idp) no sooner than 28800 seconds
2022-01-25 15:52:19 DEBUG XMLTooling.StorageService [108828] [default]: inserted record (de42060105360ab6ac6e1ca27a07d6a47c5ddf55e98aed134aa89f4857f3980d) in context (RelayState) with expiration (1643126539)
2022-01-25 15:52:19 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108828] [default]: validating input
2022-01-25 15:52:19 DEBUG OpenSAML.MessageEncoder.SAML2 [108828] [default]: tracking request (_96eb3639d8d9ce412bd66dcf48e92541) against RelayState token (ss:mem:de42060105360ab6ac6e1ca27a07d6a47c5ddf55e98aed134aa89f4857f3980d)
2022-01-25 15:52:19 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108828] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:52:19 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108828] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://ssomis.dev.nyiso.com/saml/idp/profile/redirectorpost/sso" ID="_96eb3639d8d9ce412bd66dcf48e92541" IssueInstant="2022-01-25T15:52:19Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:52:19 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108828] [default]: message encoded, sending redirect to client
2022-01-25 15:52:50 DEBUG Shibboleth.Listener [108829] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 15:52:50 DEBUG XMLTooling.StorageService [108829] [default]: inserted record (72af7030169e292b530472369e75574f1665896191da329e6284fb3a328cda1e) in context (RelayState) with expiration (1643126570)
2022-01-25 15:52:50 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108829] [default]: validating input
2022-01-25 15:52:50 DEBUG OpenSAML.MessageEncoder.SAML2 [108829] [default]: tracking request (_d4319692b969d7ac1636f55912ddfca7) against RelayState token (ss:mem:72af7030169e292b530472369e75574f1665896191da329e6284fb3a328cda1e)
2022-01-25 15:52:50 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108829] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 15:52:50 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108829] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="http://hcm.tstarns.com:18080/am2/SSORedirect/metaAlias/testUsers/idp" ID="_d4319692b969d7ac1636f55912ddfca7" IssueInstant="2022-01-25T15:52:50Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 15:52:50 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108829] [default]: message encoded, sending redirect to client
2022-01-25 15:54:42 DEBUG Shibboleth.Listener [108830] [default]: dispatching message (default/SAML2/POST)
2022-01-25 15:54:42 DEBUG OpenSAML.MessageDecoder.SAML2POST [108830] [default]: validating input
2022-01-25 15:54:42 DEBUG OpenSAML.MessageDecoder.SAML2POST [108830] [default]: decoded SAML message:
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="s2da7d33b2a4a21ade87797211b19d84a6832ff54c" InResponseTo="_d4319692b969d7ac1636f55912ddfca7" Version="2.0" IssueInstant="2022-01-25T15:54:41Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://hcm.tstarns.com:18080/am2</saml:Issuer><samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<samlp:StatusCode xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Value="urn:oasis:names:tc:SAML:2.0:status:Success">
</samlp:StatusCode>
</samlp:Status><saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="s25b045a2793843b2d131e52b8707efa2eeb55c45f" IssueInstant="2022-01-25T15:54:41Z" Version="2.0">
<saml:Issuer>http://hcm.tstarns.com:18080/am2</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#s25b045a2793843b2d131e52b8707efa2eeb55c45f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>GqxQ0CHpcgvrLRwSAWRPUeWGHBNhzRfqg+Ldc1svS3c=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>cOkSGJo6xLYUtPqS8D2K/b1I4Yw4CYFKFK5pOsUSyLWseYUYf6hgIjtcNpoGXVXgpeglLjEVjepcB3QgBRNJSJn3pT07/MTxEJkI/by9sfAJ4qnBP4TxAcc1r/SITT902uWkoQM+pKekHS2bctJxD29VZad5uRDQrSYfSJmpW4/m1UFQqXmSrn/o9jptXRNJ6jZCBJc3Cyrsu19FC5v2+zcSwT5qKrJS2Kpepekdnur91os5iyya0VyZzhBndWexd/TPyUxlKvSQCYDQjJAqEUO0mUDgwKfz8FfRHvTQnaERBJDKfccQuzfbEdn8OEEpD+lWfebaEnvW3PLxP662PA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject>
<saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="http://hcm.tstarns.com:18080/am2" SPNameQualifier="https://samltest.id/saml/sp">gkKMjrUPNp3Du3LNSogib4xE38n1</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml:SubjectConfirmationData InResponseTo="_d4319692b969d7ac1636f55912ddfca7" NotOnOrAfter="2022-01-25T16:04:41Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml:SubjectConfirmation>
</saml:Subject><saml:Conditions NotBefore="2022-01-25T15:44:41Z" NotOnOrAfter="2022-01-25T16:04:41Z">
<saml:AudienceRestriction>
<saml:Audience>https://samltest.id/saml/sp</saml:Audience>
</saml:AudienceRestriction>
</saml:Conditions>
<saml:AuthnStatement AuthnInstant="2022-01-25T15:54:41Z" SessionIndex="s2043bfc22a43ed4a68fe5fd42085a77cea62a1a01"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
2022-01-25 15:54:42 DEBUG OpenSAML.MessageDecoder.SAML2 [108830] [default]: extracting issuer from SAML 2.0 protocol message
2022-01-25 15:54:42 DEBUG OpenSAML.MessageDecoder.SAML2 [108830] [default]: message from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:54:42 DEBUG OpenSAML.MessageDecoder.SAML2 [108830] [default]: searching metadata for message issuer...
2022-01-25 15:54:42 DEBUG OpenSAML.MessageDecoder.SAML2 [108830] [default]: recovered request/response correlation value (_d4319692b969d7ac1636f55912ddfca7)
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108830] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108830] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: inserted record (s2da7d33b2a4a21ade87797211b19d84a6832ff54c) in context (MessageFlow) with expiration (1643126321)
2022-01-25 15:54:42 DEBUG Shibboleth.SSO.SAML2 [108830] [default]: processing message against SAML 2.0 SSO profile
2022-01-25 15:54:42 DEBUG Shibboleth.SSO.SAML2 [108830] [default]: extracting issuer from SAML 2.0 assertion
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108830] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [108830] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: inserted record (s25b045a2793843b2d131e52b8707efa2eeb55c45f) in context (MessageFlow) with expiration (1643126321)
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108830] [default]: validating signature profile
2022-01-25 15:54:42 DEBUG XMLTooling.KeyInfoResolver.Inline [108830] [default]: resolving ds:X509Certificate
2022-01-25 15:54:42 DEBUG XMLTooling.KeyInfoResolver.Inline [108830] [default]: resolved 1 certificate(s)
2022-01-25 15:54:42 DEBUG XMLTooling.KeyInfoResolver.Inline [108830] [default]: resolved 0 CRL(s)
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [108830] [default]: signature verified against message issuer
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108830] [default]: ignoring InResponseTo, correlation checking is disabled
2022-01-25 15:54:42 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [108830] [default]: assertion satisfied bearer confirmation requirements
2022-01-25 15:54:42 DEBUG Shibboleth.SSO.SAML2 [108830] [default]: SSO profile processing completed successfully
2022-01-25 15:54:42 DEBUG Shibboleth.SSO.SAML2 [108830] [default]: extracting pushed attributes...
2022-01-25 15:54:42 DEBUG Shibboleth.AttributeExtractor.XML [108830] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2022-01-25 15:54:42 DEBUG Shibboleth.AttributeDecoder.NameID [108830] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2022-01-25 15:54:42 DEBUG Shibboleth.AttributeExtractor.XML [108830] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2022-01-25 15:54:42 DEBUG Shibboleth.AttributeFilter [108830] [default]: filtering 1 attribute(s) from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:54:42 DEBUG Shibboleth.AttributeFilter [108830] [default]: applying filtering rule(s) for attribute (persistent-id) from (http://hcm.tstarns.com:18080/am2)
2022-01-25 15:54:42 DEBUG Shibboleth.SessionCache [108830] [default]: creating new session
2022-01-25 15:54:42 DEBUG Shibboleth.SessionCache [108830] [default]: storing new session...
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: inserted record (session) in context (_6c150b519714e2bb36c2fd346349acb1) with expiration (1643129682)
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: inserted record (gkKMjrUPNp3Du3LNSogib4xE38n1) in context (NameID) with expiration (1643154882)
2022-01-25 15:54:42 INFO Shibboleth.SessionCache [108830] [default]: new session created: ID (_6c150b519714e2bb36c2fd346349acb1) IdP (http://hcm.tstarns.com:18080/am2) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.5.45)
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: deleted record (72af7030169e292b530472369e75574f1665896191da329e6284fb3a328cda1e) in context (RelayState)
2022-01-25 15:54:42 DEBUG Shibboleth.SSO.SAML2 [108830] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2022-01-25 15:54:42 DEBUG Shibboleth.Listener [108830]: dispatching message (default::getHeaders::Application)
2022-01-25 15:54:42 DEBUG Shibboleth.Listener [108830] [default]: dispatching message (find::StorageService::SessionCache)
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: updated expiration of valid records in context (_6c150b519714e2bb36c2fd346349acb1) to (1643129682)
2022-01-25 15:54:42 DEBUG Shibboleth.Listener [108830] [default]: dispatching message (touch::StorageService::SessionCache)
2022-01-25 15:54:42 DEBUG XMLTooling.StorageService [108830] [default]: updated expiration of valid records in context (_6c150b519714e2bb36c2fd346349acb1) to (1643129682)
2022-01-25 15:55:37 INFO XMLTooling.StorageService : purged 16 expired record(s) from storage
2022-01-25 15:58:15 INFO Shibboleth.Listener [108828]: detected socket closure, shutting down worker thread
2022-01-25 15:58:16 INFO Shibboleth.Listener [108829]: detected socket closure, shutting down worker thread
2022-01-25 15:59:10 INFO Shibboleth.Listener [108830]: detected socket closure, shutting down worker thread
2022-01-25 16:04:31 DEBUG Shibboleth.Listener [108831]: dispatching message (default::getHeaders::Application)
2022-01-25 16:04:31 DEBUG Shibboleth.Listener [108831] [default]: dispatching message (default/Login::run::SAML2SI)
2022-01-25 16:04:31 DEBUG XMLTooling.StorageService [108831] [default]: inserted record (7c2a157671cc6e6c21262fccdfb2a530ce34d9cb7460ac3f4e3e6180aaf966f2) in context (RelayState) with expiration (1643127271)
2022-01-25 16:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108831] [default]: validating input
2022-01-25 16:04:31 DEBUG OpenSAML.MessageEncoder.SAML2 [108831] [default]: tracking request (_1e301ae29290429fc3631d628ff9a121) against RelayState token (ss:mem:7c2a157671cc6e6c21262fccdfb2a530ce34d9cb7460ac3f4e3e6180aaf966f2)
2022-01-25 16:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108831] [default]: marshalling, deflating, base64-encoding the message
2022-01-25 16:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108831] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_1e301ae29290429fc3631d628ff9a121" IssueInstant="2022-01-25T16:04:31Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2022-01-25 16:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [108831] [default]: message encoded, sending redirect to client
2022-01-25 16:04:54 INFO Shibboleth.Listener [108831]: detected socket closure, shutting down worker thread