2020-05-25 08:04:48 DEBUG OpenSAML.MessageDecoder.SAML2 [17450] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:04:48 DEBUG OpenSAML.MessageDecoder.SAML2 [17450] [default]: message from (http://www.okta.com/exk40838kovfTKItv357)
2020-05-25 08:04:48 DEBUG OpenSAML.MessageDecoder.SAML2 [17450] [default]: searching metadata for message issuer...
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17450] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:04:48 DEBUG XMLTooling.StorageService [17450] [default]: inserted record (id26393729366165400226138572) in context (MessageFlow) with expiration (1590394127)
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17450] [default]: validating signature profile
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17450] [default]: signature verified against message issuer
2020-05-25 08:04:48 DEBUG Shibboleth.SSO.SAML2 [17450] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:04:48 DEBUG Shibboleth.SSO.SAML2 [17450] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17450] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:04:48 DEBUG XMLTooling.StorageService [17450] [default]: inserted record (id263937293662437661175586877) in context (MessageFlow) with expiration (1590394127)
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17450] [default]: validating signature profile
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17450] [default]: signature verified against message issuer
2020-05-25 08:04:48 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17450] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:04:48 DEBUG Shibboleth.SSO.SAML2 [17450] [default]: SSO profile processing completed successfully
2020-05-25 08:04:48 DEBUG Shibboleth.SSO.SAML2 [17450] [default]: extracting pushed attributes...
2020-05-25 08:04:48 DEBUG Shibboleth.AttributeExtractor.XML [17450] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:04:48 DEBUG Shibboleth.AttributeExtractor.XML [17450] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:04:48 DEBUG Shibboleth.AttributeExtractor.XML [17450] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:04:48 DEBUG Shibboleth.SessionCache [17450] [default]: creating new session
2020-05-25 08:04:48 DEBUG Shibboleth.SessionCache [17450] [default]: storing new session...
2020-05-25 08:04:48 DEBUG XMLTooling.StorageService [17450] [default]: inserted record (session) in context (_b88a245cf16ff2252df1aade889bc355) with expiration (1590397488)
2020-05-25 08:04:48 DEBUG XMLTooling.StorageService [17450] [default]: updated record (tstahl@sysob.com) in context (NameID) with expiration (1590422688)
2020-05-25 08:04:48 INFO Shibboleth.SessionCache [17450] [default]: new session created: ID (_b88a245cf16ff2252df1aade889bc355) IdP (http://www.okta.com/exk40838kovfTKItv357) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 08:04:48 DEBUG Shibboleth.SSO.SAML2 [17450] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:04:48 DEBUG Shibboleth.Listener [17450]: dispatching message (default::getHeaders::Application)
2020-05-25 08:04:48 DEBUG Shibboleth.Listener [17450] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:04:48 DEBUG XMLTooling.StorageService [17450] [default]: updated expiration of valid records in context (_b88a245cf16ff2252df1aade889bc355) to (1590397488)
2020-05-25 08:04:48 DEBUG Shibboleth.Listener [17450] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:04:48 DEBUG XMLTooling.StorageService [17450] [default]: updated expiration of valid records in context (_b88a245cf16ff2252df1aade889bc355) to (1590397488)
2020-05-25 08:05:00 DEBUG Shibboleth.Listener [17451] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:05:00 INFO OpenSAML.MetadataProvider.Dynamic [17451] [default]: resolving metadata for (https://iam.aot-technologies.com/auth/realms/forms.io/protocol/saml/descriptor)
2020-05-25 08:05:00 ERROR OpenSAML.MetadataProvider.Dynamic [17451] [default]: error while resolving (https://iam.aot-technologies.com/auth/realms/forms.io/protocol/saml/descriptor): Unable to access local file (/home/mdupload/dc87cf831748bbb755d05df6ee516bf6493ef7b2.xml)
2020-05-25 08:05:00 WARN Shibboleth.SessionInitiator.SAML2 [17451] [default]: unable to locate metadata for provider (https://iam.aot-technologies.com/auth/realms/forms.io/protocol/saml/descriptor)
2020-05-25 08:05:07 DEBUG Shibboleth.Listener [17452] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:05:07 INFO OpenSAML.MetadataProvider.Dynamic [17452] [default]: resolving metadata for (https://iam.aot-technologies.com/auth/realms/forms.io/protocol/saml/descriptor)
2020-05-25 08:05:07 ERROR OpenSAML.MetadataProvider.Dynamic [17452] [default]: error while resolving (https://iam.aot-technologies.com/auth/realms/forms.io/protocol/saml/descriptor): Unable to access local file (/home/mdupload/dc87cf831748bbb755d05df6ee516bf6493ef7b2.xml)
2020-05-25 08:05:07 WARN Shibboleth.SessionInitiator.SAML2 [17452] [default]: unable to locate metadata for provider (https://iam.aot-technologies.com/auth/realms/forms.io/protocol/saml/descriptor)
2020-05-25 08:05:24 INFO Shibboleth.Listener [17451]: detected socket closure, shutting down worker thread
2020-05-25 08:05:25 INFO Shibboleth.Listener [17450]: detected socket closure, shutting down worker thread
2020-05-25 08:05:37 DEBUG Shibboleth.Listener [17453] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:05:37 DEBUG Shibboleth.Listener [17453] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 08:05:37 DEBUG Shibboleth.SessionCache [17453] [default]: searching for session (_b88a245cf16ff2252df1aade889bc355)
2020-05-25 08:05:37 DEBUG Shibboleth.SessionCache [17453] [default]: reconstituting session and checking validity
2020-05-25 08:05:37 INFO Shibboleth.LogoutInitiator.SAML2 [17453] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (http://www.okta.com/exk40838kovfTKItv357).
2020-05-25 08:05:37 DEBUG Shibboleth.Listener [17453] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:05:37 DEBUG Shibboleth.SessionCache [17453] [default]: searching for session (_b88a245cf16ff2252df1aade889bc355)
2020-05-25 08:05:37 DEBUG Shibboleth.SessionCache [17453] [default]: reconstituting session and checking validity
2020-05-25 08:05:37 INFO Shibboleth.SessionCache [17453] [default]: removed session (_b88a245cf16ff2252df1aade889bc355)
2020-05-25 08:05:42 DEBUG Shibboleth.Listener [17453]: dispatching message (default::getHeaders::Application)
2020-05-25 08:05:42 DEBUG Shibboleth.Listener [17453] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:05:42 DEBUG XMLTooling.StorageService [17453] [default]: inserted record (5e5dddf81d7e672123cdf229d9edf98ab7ed355c07c4c2ba4f9fb73fb8b32227) in context (RelayState) with expiration (1590394542)
2020-05-25 08:05:42 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17453] [default]: validating input
2020-05-25 08:05:42 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17453] [default]: marshalling, deflating, base64-encoding the message
2020-05-25 08:05:42 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17453] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_3754308baa4f52c117a54a2b4772318d" IssueInstant="2020-05-25T08:05:42Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 08:05:42 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17453] [default]: message encoded, sending redirect to client
2020-05-25 08:05:51 DEBUG Shibboleth.Listener [17454] [default]: dispatching message (default/SAML2/POST)
2020-05-25 08:05:51 DEBUG OpenSAML.MessageDecoder.SAML2POST [17454] [default]: validating input
2020-05-25 08:05:51 DEBUG OpenSAML.MessageDecoder.SAML2POST [17454] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="id26394421554878047529342548" IssueInstant="2020-05-25T08:05:50.786Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id26394421554878047529342548"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>2e1DnB1C3Un+vYonoB9aE/ssOtj7aDBIoSlD1eExU1s=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SrBdQFcGZEVralPmG1ZcXJ/zrfPKk1CSCo1H1tCUcaJEHejVNMwsLFUKTyzepRgTgYEQL0zKHvDf5joED5o+o9H1XvaqL4Ykmgx4bT9ptNzJWzdHxqZUZBEmegbz4sO2JYFFL2OSTxTN2CtK9STdaSaHBkp1VDsuIl1+YKkrNU9qmKj0GaIjtZjxjeZgUTwCnw+x/hTWFkGFDROYCZFv8hjbk0/UWOR95h+qpP+X+1brsCWMG6SbeLyG813p2mKXanyZ1STZ/xR5UzR8795NuaY4acfowyQ2X71it1H7SioES3gO1bfhHoZWIrDXYoscMDOZ2iQNdBER76DaMoFgSg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG
A1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEU
MBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDHN5c29ic2FuZGJveDEcMBoGCSqGSIb3DQEJ
ARYNaW5mb0Bva3RhLmNvbTAeFw0xOTExMjkwOTA5MzVaFw0yOTExMjkwOTEwMzVaMIGUMQswCQYD
VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsG
A1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDHN5c29ic2FuZGJveDEc
MBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIvFpI47qvieLxPqqFc766LzUMmnNOikr7vzQsEMISRXuOY+NkcxkVOh5LDtdRJLC9z9YXN1
sEJbUw3g9AbZ+IT6atXCsH+iZsnWwh2IcauUzxIlgkUzxOrpspzG8Jlo4wauGVHBtph5ItrtXUbV
H4LpzQGzZbHPZjtjgqGHnQt9dRhf9mKWzWbru1XvG5oROYWbohhGpzUMrPYJS/KphwavZ5usr3jz
+l4chXSkua0pgsFlvFs6u2ggvkWg1m0cjS6fOiGXyvoKsPTJTcpqkTlpq4mxAVkcgp2WzUI/+0pA
ltoBN+/GlRGu8sxvI22VYFp4ydZ5SdT984lThmhc8eMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEA
YLozyCvZV7S8AwAv8VD5PLjC4B2Us7vMJC9wAZaiYafEn7KpJor2pYN3181mLhMd/db8pr+IRV9y
8f9qwfdFK5BQ7vtUd9B25/ZjVf5E5ELrcfvLqviB/oSSomyXXG2sRrOmAddrz3yQjxN8Z795KQTa
H1k1IKY6brjAC29pGZx7LPHsmCodoiZZHCUm6mx9rp8PIrryhAfaFboPGaYOVwdlSw5w4BdPPAs4
9uopd0mSPdOSeGU3GkVsWDr5rTII4stx9uxj115iD+U0JzZivYtXdWPmV+7gsJPRy4i/2MkaUjTq
UEQKGT8mgiW1Ik6lCub6AMbKhnIPzawGhpNEbg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="id263944215549525131577180491" IssueInstant="2020-05-25T08:05:50.786Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id263944215549525131577180491"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>nFi6GC51b1hTAtUr9LZXnGxdiVXBebocPNRF0avu7kI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>WRw1Wng+12Q6zAVJbNyuH/3PCJsx+rRACC9lxiWI2Cq9eUeAbAWn7qrlSEnChFOK5I8Okkc+8oRjG+SRHS27jWWCyWPl06yufOaErAIyjsJX9S1ndrOHe0zWleJsu3/6+ncfpEqcglpTk6GtRNbk6NDlCyp2X2mzzgPqVWXIYwY2bxkjEr6IGYe/DEgTKmfFJjd/tg9HfUSUMR7AsMQRAx2DlpqXPs8m5cVLWFx14F3vQKl7ZRVWebSu0B/1+j4u5KAEg8Kzl/+M8PLbTQmMEtMQD24WForrMtsq+SHW0KaA5DAZr8CJuomKcyqN8Dg+50/xEuJmNFqp7au4xEU+EA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG
A1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEU
MBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDHN5c29ic2FuZGJveDEcMBoGCSqGSIb3DQEJ
ARYNaW5mb0Bva3RhLmNvbTAeFw0xOTExMjkwOTA5MzVaFw0yOTExMjkwOTEwMzVaMIGUMQswCQYD
VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsG
A1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDHN5c29ic2FuZGJveDEc
MBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIvFpI47qvieLxPqqFc766LzUMmnNOikr7vzQsEMISRXuOY+NkcxkVOh5LDtdRJLC9z9YXN1
sEJbUw3g9AbZ+IT6atXCsH+iZsnWwh2IcauUzxIlgkUzxOrpspzG8Jlo4wauGVHBtph5ItrtXUbV
H4LpzQGzZbHPZjtjgqGHnQt9dRhf9mKWzWbru1XvG5oROYWbohhGpzUMrPYJS/KphwavZ5usr3jz
+l4chXSkua0pgsFlvFs6u2ggvkWg1m0cjS6fOiGXyvoKsPTJTcpqkTlpq4mxAVkcgp2WzUI/+0pA
ltoBN+/GlRGu8sxvI22VYFp4ydZ5SdT984lThmhc8eMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEA
YLozyCvZV7S8AwAv8VD5PLjC4B2Us7vMJC9wAZaiYafEn7KpJor2pYN3181mLhMd/db8pr+IRV9y
8f9qwfdFK5BQ7vtUd9B25/ZjVf5E5ELrcfvLqviB/oSSomyXXG2sRrOmAddrz3yQjxN8Z795KQTa
H1k1IKY6brjAC29pGZx7LPHsmCodoiZZHCUm6mx9rp8PIrryhAfaFboPGaYOVwdlSw5w4BdPPAs4
9uopd0mSPdOSeGU3GkVsWDr5rTII4stx9uxj115iD+U0JzZivYtXdWPmV+7gsJPRy4i/2MkaUjTq
UEQKGT8mgiW1Ik6lCub6AMbKhnIPzawGhpNEbg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">tstahl@sysob.com</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData NotOnOrAfter="2020-05-25T08:10:50.786Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T08:00:50.786Z" NotOnOrAfter="2020-05-25T08:10:50.786Z" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T08:04:46.275Z" SessionIndex="id1590393950784.1126893793" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 08:05:51 DEBUG OpenSAML.MessageDecoder.SAML2 [17454] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:05:51 DEBUG OpenSAML.MessageDecoder.SAML2 [17454] [default]: message from (http://www.okta.com/exk40838kovfTKItv357)
2020-05-25 08:05:51 DEBUG OpenSAML.MessageDecoder.SAML2 [17454] [default]: searching metadata for message issuer...
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17454] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:05:51 DEBUG XMLTooling.StorageService [17454] [default]: inserted record (id26394421554878047529342548) in context (MessageFlow) with expiration (1590394190)
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17454] [default]: validating signature profile
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17454] [default]: signature verified against message issuer
2020-05-25 08:05:51 DEBUG Shibboleth.SSO.SAML2 [17454] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:05:51 DEBUG Shibboleth.SSO.SAML2 [17454] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17454] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:05:51 DEBUG XMLTooling.StorageService [17454] [default]: inserted record (id263944215549525131577180491) in context (MessageFlow) with expiration (1590394190)
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17454] [default]: validating signature profile
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17454] [default]: signature verified against message issuer
2020-05-25 08:05:51 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17454] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:05:51 DEBUG Shibboleth.SSO.SAML2 [17454] [default]: SSO profile processing completed successfully
2020-05-25 08:05:51 DEBUG Shibboleth.SSO.SAML2 [17454] [default]: extracting pushed attributes...
2020-05-25 08:05:51 DEBUG Shibboleth.AttributeExtractor.XML [17454] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:05:51 DEBUG Shibboleth.AttributeExtractor.XML [17454] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:05:51 DEBUG Shibboleth.AttributeExtractor.XML [17454] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:05:51 DEBUG Shibboleth.SessionCache [17454] [default]: creating new session
2020-05-25 08:05:51 DEBUG Shibboleth.SessionCache [17454] [default]: storing new session...
2020-05-25 08:05:51 DEBUG XMLTooling.StorageService [17454] [default]: inserted record (session) in context (_e0087a84887bfad61dea6c62f614d7c7) with expiration (1590397551)
2020-05-25 08:05:51 DEBUG XMLTooling.StorageService [17454] [default]: updated record (tstahl@sysob.com) in context (NameID) with expiration (1590422751)
2020-05-25 08:05:51 INFO Shibboleth.SessionCache [17454] [default]: new session created: ID (_e0087a84887bfad61dea6c62f614d7c7) IdP (http://www.okta.com/exk40838kovfTKItv357) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 08:05:51 DEBUG Shibboleth.SSO.SAML2 [17454] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:05:51 DEBUG Shibboleth.Listener [17454]: dispatching message (default::getHeaders::Application)
2020-05-25 08:05:51 DEBUG Shibboleth.Listener [17454] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:05:51 DEBUG XMLTooling.StorageService [17454] [default]: updated expiration of valid records in context (_e0087a84887bfad61dea6c62f614d7c7) to (1590397551)
2020-05-25 08:05:51 DEBUG Shibboleth.Listener [17454] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:05:51 DEBUG XMLTooling.StorageService [17454] [default]: updated expiration of valid records in context (_e0087a84887bfad61dea6c62f614d7c7) to (1590397551)
2020-05-25 08:05:53 INFO Shibboleth.Listener [17453]: detected socket closure, shutting down worker thread
2020-05-25 08:06:15 DEBUG Shibboleth.Listener [17455] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:06:15 DEBUG Shibboleth.Listener [17455] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 08:06:15 DEBUG Shibboleth.SessionCache [17455] [default]: searching for session (_e0087a84887bfad61dea6c62f614d7c7)
2020-05-25 08:06:15 DEBUG Shibboleth.SessionCache [17455] [default]: reconstituting session and checking validity
2020-05-25 08:06:15 INFO Shibboleth.LogoutInitiator.SAML2 [17455] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (http://www.okta.com/exk40838kovfTKItv357).
2020-05-25 08:06:15 DEBUG Shibboleth.Listener [17455] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:06:15 DEBUG Shibboleth.SessionCache [17455] [default]: searching for session (_e0087a84887bfad61dea6c62f614d7c7)
2020-05-25 08:06:15 DEBUG Shibboleth.SessionCache [17455] [default]: reconstituting session and checking validity
2020-05-25 08:06:15 INFO Shibboleth.SessionCache [17455] [default]: removed session (_e0087a84887bfad61dea6c62f614d7c7)
2020-05-25 08:06:17 DEBUG Shibboleth.Listener [17455] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:06:28 DEBUG Shibboleth.Listener [17456] [default]: dispatching message (default/SAML2/POST)
2020-05-25 08:06:28 DEBUG OpenSAML.MessageDecoder.SAML2POST [17456] [default]: validating input
2020-05-25 08:06:28 DEBUG OpenSAML.MessageDecoder.SAML2POST [17456] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="id26394825899490924635595608" IssueInstant="2020-05-25T08:06:27.840Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id26394825899490924635595608"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>yIcBJJjO8K6xGpJCZqXd3QvsnEhiMbz1n2KXf8ZrOZI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ZQeehZ3l3esXKlz9eU0DDVgeUHYKWt7fPKP7LiNYYXvpX1yBqSWFSP2RhPkLg5YIv6WRaAzRilJpMW5AR311izdrWw8k/JuHhpCIEx7rrp5EoYzdiOs6BbJOTIWslas/9nym2DiC8Hw0dV97p9aJliKP14IoTjEGUcHlpoqth/JQdhHyg3DYgOOwabxilM4xOSy/3oN4xcrA94LeqgyHlEMyeFvQkZiPgPtuIlsfDVMvbX/7YXvQhZRc9a7TUXNaTmCsCzbqXiyMiK3RRxV5xJ/+ZmBfzehrJbr5Djw5Fewd8j7KAOJRmgcjohYOBXwRMtybQvwbqDm1ef0Q3wP0Uw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="id26394825899564384410642108" IssueInstant="2020-05-25T08:06:27.840Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id26394825899564384410642108"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>1wrMhW2Dz00If+1uoEUngPHiBHg4dajWDQtLcp+VwRE=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>P1HiyQJuPG6icV1wejPu/ktnttlIT/DFoLVRw9X98fBH7zxK81uqzcslCYEKT61zYdpDL8I7LHcytl/iVtdtPkCGGuruCaxFqIXn/6BPB5YlsXN1sy+xZ/29i6dj/iA1gv3g1pE2vWKlwUW/pdkLSJM14Rf821fPUnEycFldRql7CmVGjouRAXLe+IuI6UIbP19cRT1x5zi7kR3G9qQ5wklYWmCg6gLWosQ5WWLyx91e2kCpyGPDIL3UUA/BJYgPVo75Fpi6X9En9HqjFyT6mrEVcuxB8/SpE88izh4ZbwDIyMVIBQ8BHcLxU3yj7qZ8Fic0jQxhKCQIHzZYbkfqTA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">tstahl@sysob.com</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData NotOnOrAfter="2020-05-25T08:11:27.840Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T08:01:27.840Z" NotOnOrAfter="2020-05-25T08:11:27.840Z" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T08:04:46.275Z" SessionIndex="id1590393987838.1309482713" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 08:06:28 DEBUG OpenSAML.MessageDecoder.SAML2 [17456] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:06:28 DEBUG OpenSAML.MessageDecoder.SAML2 [17456] [default]: message from (http://www.okta.com/exk40838kovfTKItv357)
2020-05-25 08:06:28 DEBUG OpenSAML.MessageDecoder.SAML2 [17456] [default]: searching metadata for message issuer...
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17456] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:06:28 DEBUG XMLTooling.StorageService [17456] [default]: inserted record (id26394825899490924635595608) in context (MessageFlow) with expiration (1590394227)
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17456] [default]: validating signature profile
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17456] [default]: signature verified against message issuer
2020-05-25 08:06:28 DEBUG Shibboleth.SSO.SAML2 [17456] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:06:28 DEBUG Shibboleth.SSO.SAML2 [17456] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17456] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:06:28 DEBUG XMLTooling.StorageService [17456] [default]: inserted record (id26394825899564384410642108) in context (MessageFlow) with expiration (1590394227)
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17456] [default]: validating signature profile
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17456] [default]: signature verified against message issuer
2020-05-25 08:06:28 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17456] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:06:28 DEBUG Shibboleth.SSO.SAML2 [17456] [default]: SSO profile processing completed successfully
2020-05-25 08:06:28 DEBUG Shibboleth.SSO.SAML2 [17456] [default]: extracting pushed attributes...
2020-05-25 08:06:28 DEBUG Shibboleth.AttributeExtractor.XML [17456] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:06:28 DEBUG Shibboleth.AttributeExtractor.XML [17456] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:06:28 DEBUG Shibboleth.AttributeExtractor.XML [17456] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:06:28 DEBUG Shibboleth.SessionCache [17456] [default]: creating new session
2020-05-25 08:06:28 DEBUG Shibboleth.SessionCache [17456] [default]: storing new session...
2020-05-25 08:06:28 DEBUG XMLTooling.StorageService [17456] [default]: inserted record (session) in context (_8f371ad54c57a625d9c469608ecc2567) with expiration (1590397588)
2020-05-25 08:06:28 DEBUG XMLTooling.StorageService [17456] [default]: updated record (tstahl@sysob.com) in context (NameID) with expiration (1590422788)
2020-05-25 08:06:28 INFO Shibboleth.SessionCache [17456] [default]: new session created: ID (_8f371ad54c57a625d9c469608ecc2567) IdP (http://www.okta.com/exk40838kovfTKItv357) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 08:06:28 DEBUG Shibboleth.SSO.SAML2 [17456] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:06:28 DEBUG Shibboleth.Listener [17456]: dispatching message (default::getHeaders::Application)
2020-05-25 08:06:28 DEBUG Shibboleth.Listener [17456] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:06:28 DEBUG XMLTooling.StorageService [17456] [default]: updated expiration of valid records in context (_8f371ad54c57a625d9c469608ecc2567) to (1590397588)
2020-05-25 08:06:28 DEBUG Shibboleth.Listener [17456] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:06:28 DEBUG XMLTooling.StorageService [17456] [default]: updated expiration of valid records in context (_8f371ad54c57a625d9c469608ecc2567) to (1590397588)
2020-05-25 08:06:32 DEBUG Shibboleth.Listener [17456] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 08:06:32 DEBUG Shibboleth.SessionCache [17456] [default]: searching for session (_8f371ad54c57a625d9c469608ecc2567)
2020-05-25 08:06:32 DEBUG Shibboleth.SessionCache [17456] [default]: reconstituting session and checking validity
2020-05-25 08:06:32 INFO Shibboleth.LogoutInitiator.SAML2 [17456] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (http://www.okta.com/exk40838kovfTKItv357).
2020-05-25 08:06:32 DEBUG Shibboleth.Listener [17456] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:06:32 DEBUG Shibboleth.SessionCache [17456] [default]: searching for session (_8f371ad54c57a625d9c469608ecc2567)
2020-05-25 08:06:32 DEBUG Shibboleth.SessionCache [17456] [default]: reconstituting session and checking validity
2020-05-25 08:06:32 INFO Shibboleth.SessionCache [17456] [default]: removed session (_8f371ad54c57a625d9c469608ecc2567)
2020-05-25 08:06:42 DEBUG Shibboleth.Listener [17457] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:06:44 DEBUG Shibboleth.Listener [17457]: dispatching message (default::getHeaders::Application)
2020-05-25 08:06:44 DEBUG Shibboleth.Listener [17457] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:06:44 DEBUG XMLTooling.StorageService [17457] [default]: inserted record (6fb0762d9a4dbfaba217f99fedb8f2c352948889ade33f11c9c67cdd763b1c46) in context (RelayState) with expiration (1590394604)
2020-05-25 08:06:44 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17457] [default]: validating input
2020-05-25 08:06:44 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17457] [default]: marshalling, deflating, base64-encoding the message
2020-05-25 08:06:44 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17457] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_0dd3285420e94789c5cece5100f5df95" IssueInstant="2020-05-25T08:06:44Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 08:06:44 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17457] [default]: message encoded, sending redirect to client
2020-05-25 08:06:47 DEBUG Shibboleth.Listener [17458]: dispatching message (default::getHeaders::Application)
2020-05-25 08:06:47 DEBUG Shibboleth.Listener [17458] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:06:47 DEBUG XMLTooling.StorageService [17458] [default]: inserted record (52e37323cd91f1df9300ed27f592f0d62e301be1ab505bfe243600ca0d721f3c) in context (RelayState) with expiration (1590394607)
2020-05-25 08:06:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17458] [default]: validating input
2020-05-25 08:06:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17458] [default]: marshalling, deflating, base64-encoding the message
2020-05-25 08:06:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17458] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_8ac256195b967b05d56811e33daadc61" IssueInstant="2020-05-25T08:06:47Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 08:06:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17458] [default]: message encoded, sending redirect to client
2020-05-25 08:06:49 INFO Shibboleth.Listener [17457]: detected socket closure, shutting down worker thread
2020-05-25 08:06:50 INFO Shibboleth.Listener [17454]: detected socket closure, shutting down worker thread
2020-05-25 08:06:51 DEBUG Shibboleth.Listener [17459]: dispatching message (default::getHeaders::Application)
2020-05-25 08:06:51 DEBUG Shibboleth.Listener [17459] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:06:51 DEBUG XMLTooling.StorageService [17459] [default]: inserted record (c4e7e3a0adc8fffebc69ba047343cf2de30386e8d6a0863a3682c892c537fe17) in context (RelayState) with expiration (1590394611)
2020-05-25 08:06:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17459] [default]: validating input
2020-05-25 08:06:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17459] [default]: marshalling, deflating, base64-encoding the message
2020-05-25 08:06:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17459] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_03d09f48a2170185a86f0decfe1f8deb" IssueInstant="2020-05-25T08:06:51Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 08:06:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17459] [default]: message encoded, sending redirect to client
2020-05-25 08:06:51 INFO Shibboleth.Listener [17452]: detected socket closure, shutting down worker thread
2020-05-25 08:07:10 INFO Shibboleth.Listener [17456]: detected socket closure, shutting down worker thread
2020-05-25 08:07:16 DEBUG Shibboleth.Listener [17460] [default]: dispatching message (default/SAML2/POST)
2020-05-25 08:07:16 DEBUG OpenSAML.MessageDecoder.SAML2POST [17460] [default]: validating input
2020-05-25 08:07:16 DEBUG OpenSAML.MessageDecoder.SAML2POST [17460] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="id23458162803428065112813996" IssueInstant="2020-05-25T08:07:15.889Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id23458162803428065112813996"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>caVGgu+QHS5hMbiJJILx+NMILHQ7R2TJAmEwDHnRqOo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JqkH8uABs4s+yEdwfIusdH++ddpT+VLL1hhDgTA4wfZyf+/BxOvlGhG2coa7ezGaXLjo4BHY+tZRIiKpNOCTfiD7HhiryOgwbLUIx5mexxzme1yZD/RLYKP6FyugfskSDe1fd1HE1Tj4itxCUHh8FROSD0cAdLVWHjUuTYR0qmO8svnN0MYxFMDWjmWmVbs68qywbf/GAhzCnqMfAWnSPcv2wV9JAYqcyVjOENBOiiCf7RZmYg8Cz51zINXH3t+oRU0XmG5stwTs1xUAzqRB2dUtoCdACKZCys7GqTCbk4Uk5K7eZLY2E/n7nS5XioEdlmIzH/gHMUXeKwQwB4tPuA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG
A1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEU
MBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDHN5c29ic2FuZGJveDEcMBoGCSqGSIb3DQEJ
ARYNaW5mb0Bva3RhLmNvbTAeFw0xOTExMjkwOTA5MzVaFw0yOTExMjkwOTEwMzVaMIGUMQswCQYD
VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsG
A1UECgwET2t0YTEUMBIGA1UECwwLU1NPUHJvdmlkZXIxFTATBgNVBAMMDHN5c29ic2FuZGJveDEc
MBoGCSqGSIb3DQEJARYNaW5mb0Bva3RhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIvFpI47qvieLxPqqFc766LzUMmnNOikr7vzQsEMISRXuOY+NkcxkVOh5LDtdRJLC9z9YXN1
sEJbUw3g9AbZ+IT6atXCsH+iZsnWwh2IcauUzxIlgkUzxOrpspzG8Jlo4wauGVHBtph5ItrtXUbV
H4LpzQGzZbHPZjtjgqGHnQt9dRhf9mKWzWbru1XvG5oROYWbohhGpzUMrPYJS/KphwavZ5usr3jz
+l4chXSkua0pgsFlvFs6u2ggvkWg1m0cjS6fOiGXyvoKsPTJTcpqkTlpq4mxAVkcgp2WzUI/+0pA
ltoBN+/GlRGu8sxvI22VYFp4ydZ5SdT984lThmhc8eMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEA
YLozyCvZV7S8AwAv8VD5PLjC4B2Us7vMJC9wAZaiYafEn7KpJor2pYN3181mLhMd/db8pr+IRV9y
8f9qwfdFK5BQ7vtUd9B25/ZjVf5E5ELrcfvLqviB/oSSomyXXG2sRrOmAddrz3yQjxN8Z795KQTa
H1k1IKY6brjAC29pGZx7LPHsmCodoiZZHCUm6mx9rp8PIrryhAfaFboPGaYOVwdlSw5w4BdPPAs4
9uopd0mSPdOSeGU3GkVsWDr5rTII4stx9uxj115iD+U0JzZivYtXdWPmV+7gsJPRy4i/2MkaUjTq
UEQKGT8mgiW1Ik6lCub6AMbKhnIPzawGhpNEbg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="id234581628035037601937337176" IssueInstant="2020-05-25T08:07:15.889Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id234581628035037601937337176"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>sEWeLwfusL5b5FEE2FdfRkgH+A8vRX5pOrL/jfpeiLc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>ScqId1u6PE1nAYPLtAgViABgvPlAkQmH7SQmsJXs8sQ0rxD5tNE/cIbvKXAkhODSfaX1t1u6M+Exdh3XfjzrA9zc87z68zEFLYxWAiOAudiAByQNCPSKQlpHNdnTSECrcM4u+/EpPibe7wsXHovdPwVB6EbP2cuJ9/SuKtUlOL3hQg/4lq7mbcFYVlqp3UmEpI2siXm2eNFHaPnj4LPcCt+RQWjrlfmyc/Cr607OumlViy2aqQgwcD6i8RT2uM4KLNNPmu5r+B2v66Hgka/smRJ6IaScloNoaGU25FKfQwgH8OmbT0HYOyKVje/5Hg3w3VW+ndzDhaoV7MBC5PKjqw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">tstahl@sysob.com</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData NotOnOrAfter="2020-05-25T08:12:15.890Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T08:02:15.890Z" NotOnOrAfter="2020-05-25T08:12:15.890Z" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T08:04:46.275Z" SessionIndex="id1590394035888.328025381" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 08:07:16 DEBUG OpenSAML.MessageDecoder.SAML2 [17460] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:07:16 DEBUG OpenSAML.MessageDecoder.SAML2 [17460] [default]: message from (http://www.okta.com/exk40838kovfTKItv357)
2020-05-25 08:07:16 DEBUG OpenSAML.MessageDecoder.SAML2 [17460] [default]: searching metadata for message issuer...
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17460] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:07:16 DEBUG XMLTooling.StorageService [17460] [default]: inserted record (id23458162803428065112813996) in context (MessageFlow) with expiration (1590394275)
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17460] [default]: validating signature profile
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17460] [default]: signature verified against message issuer
2020-05-25 08:07:16 DEBUG Shibboleth.SSO.SAML2 [17460] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:07:16 DEBUG Shibboleth.SSO.SAML2 [17460] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17460] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:07:16 DEBUG XMLTooling.StorageService [17460] [default]: inserted record (id234581628035037601937337176) in context (MessageFlow) with expiration (1590394275)
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17460] [default]: validating signature profile
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17460] [default]: signature verified against message issuer
2020-05-25 08:07:16 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17460] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:07:16 DEBUG Shibboleth.SSO.SAML2 [17460] [default]: SSO profile processing completed successfully
2020-05-25 08:07:16 DEBUG Shibboleth.SSO.SAML2 [17460] [default]: extracting pushed attributes...
2020-05-25 08:07:16 DEBUG Shibboleth.AttributeExtractor.XML [17460] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:07:16 DEBUG Shibboleth.AttributeExtractor.XML [17460] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:07:16 DEBUG Shibboleth.AttributeExtractor.XML [17460] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:07:16 DEBUG Shibboleth.SessionCache [17460] [default]: creating new session
2020-05-25 08:07:16 DEBUG Shibboleth.SessionCache [17460] [default]: storing new session...
2020-05-25 08:07:16 DEBUG XMLTooling.StorageService [17460] [default]: inserted record (session) in context (_e69978026159e9526352b38ae3bb92ae) with expiration (1590397636)
2020-05-25 08:07:16 DEBUG XMLTooling.StorageService [17460] [default]: updated record (tstahl@sysob.com) in context (NameID) with expiration (1590422836)
2020-05-25 08:07:16 INFO Shibboleth.SessionCache [17460] [default]: new session created: ID (_e69978026159e9526352b38ae3bb92ae) IdP (http://www.okta.com/exk40838kovfTKItv357) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 08:07:16 DEBUG Shibboleth.SSO.SAML2 [17460] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:07:16 DEBUG Shibboleth.Listener [17460]: dispatching message (default::getHeaders::Application)
2020-05-25 08:07:16 DEBUG Shibboleth.Listener [17460] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:07:16 DEBUG XMLTooling.StorageService [17460] [default]: updated expiration of valid records in context (_e69978026159e9526352b38ae3bb92ae) to (1590397636)
2020-05-25 08:07:17 DEBUG Shibboleth.Listener [17460] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:07:17 DEBUG XMLTooling.StorageService [17460] [default]: updated expiration of valid records in context (_e69978026159e9526352b38ae3bb92ae) to (1590397637)
2020-05-25 08:07:49 INFO Shibboleth.Listener [17458]: detected socket closure, shutting down worker thread
2020-05-25 08:08:25 INFO Shibboleth.Listener [17455]: detected socket closure, shutting down worker thread
2020-05-25 08:08:29 INFO Shibboleth.Listener [17459]: detected socket closure, shutting down worker thread
2020-05-25 08:09:01 INFO Shibboleth.Listener [17460]: detected socket closure, shutting down worker thread
2020-05-25 08:09:46 INFO XMLTooling.StorageService : purged 9 expired record(s) from storage
2020-05-25 08:18:22 DEBUG Shibboleth.Listener [17461] [default]: dispatching message (default/SAML2/POST)
2020-05-25 08:18:22 DEBUG OpenSAML.MessageDecoder.SAML2POST [17461] [default]: validating input
2020-05-25 08:18:22 DEBUG OpenSAML.MessageDecoder.SAML2POST [17461] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="id26395172431685058323410492" IssueInstant="2020-05-25T08:18:21.662Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id26395172431685058323410492"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>aUulIzwypCMzVtylEEh8m9X9JSJ9UzW1KWa1vQKHZqo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SNPEldDyL65udEzDwtj81cl9e5bfn4LexI8Vs4w9s/6tWUYFMrA/yNLX60abpCZ5iT/0qBLZQoE2FXmWqkSIAV+lEnbcdl3och7YCYI27ausqBrR9+bjCrijr/UxVX0PEuvKIjyAbpAGYVFB05iCFNtAJq/CFP6kba/SwpSKVOfz9vsNgsVtM0eJiNZ+5f0zB3weoa+y/KrTrmvJ8f00QC+PdQJQgfNUo20zHgbBiIHOSM6aIoDgdsPzeWGnHK/7lmknpyXzoTswlshf16eeVqzw+XEBPNJKbRs0c4aJC376RiAWDIlKFPlvrJMsPYoAnqDLz+MolFFAqX/fTBUb7g==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="id263951724317611322073861513" IssueInstant="2020-05-25T08:18:21.662Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">http://www.okta.com/exk40838kovfTKItv357</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#id263951724317611322073861513"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>yZESKHOioNtGsfB8j9u8CyMuU6F+UPlLWk4t0ML0tbk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>BbKAM+Jd6Z9rlaUozwLdsgmdPB5AS9WNPnTpH4tsP8B3GmHpmn3yNlhLJs5XSBwN8ADNCFaRhYPUuEWj8A9uOZuPmfuAVJ8VJJ6bEJW1mryj9UWkkqCqR4jJwbj6B7y4wZXUqpFhTY5DfzZTZVeFGJGHrTMh5QOkBOd3L8yZ30lwszKQW2EkWfNVDVDZcE3O7vkQSjxYoxclTM4WeY+hlP3RO1WrNCwQi3q9maO1/oICXejDcXFbYapdM1zsNyh/u1+0IAKI77D8CKmcPjIsPi0cXED5zC5c5JN0U+c81wHOPYc88WksrydiUrLiNcnoABtBnl8wtOvIPWpfh7g0cw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDqDCCApCgAwIBAgIGAW62bSFFMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYDVQQGEwJVUzETMBEG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">tstahl@sysob.com</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData NotOnOrAfter="2020-05-25T08:23:21.662Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T08:13:21.662Z" NotOnOrAfter="2020-05-25T08:23:21.662Z" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T08:04:46.275Z" SessionIndex="id1590394701661.99084241" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 08:18:22 DEBUG OpenSAML.MessageDecoder.SAML2 [17461] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:18:22 DEBUG OpenSAML.MessageDecoder.SAML2 [17461] [default]: message from (http://www.okta.com/exk40838kovfTKItv357)
2020-05-25 08:18:22 DEBUG OpenSAML.MessageDecoder.SAML2 [17461] [default]: searching metadata for message issuer...
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17461] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:18:22 DEBUG XMLTooling.StorageService [17461] [default]: inserted record (id26395172431685058323410492) in context (MessageFlow) with expiration (1590394941)
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17461] [default]: validating signature profile
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17461] [default]: signature verified against message issuer
2020-05-25 08:18:22 DEBUG Shibboleth.SSO.SAML2 [17461] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:18:22 DEBUG Shibboleth.SSO.SAML2 [17461] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17461] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:18:22 DEBUG XMLTooling.StorageService [17461] [default]: inserted record (id263951724317611322073861513) in context (MessageFlow) with expiration (1590394941)
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17461] [default]: validating signature profile
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17461] [default]: signature verified against message issuer
2020-05-25 08:18:22 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17461] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:18:22 DEBUG Shibboleth.SSO.SAML2 [17461] [default]: SSO profile processing completed successfully
2020-05-25 08:18:22 DEBUG Shibboleth.SSO.SAML2 [17461] [default]: extracting pushed attributes...
2020-05-25 08:18:22 DEBUG Shibboleth.AttributeExtractor.XML [17461] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:18:22 DEBUG Shibboleth.AttributeExtractor.XML [17461] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:18:22 DEBUG Shibboleth.AttributeExtractor.XML [17461] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:18:22 DEBUG Shibboleth.SessionCache [17461] [default]: creating new session
2020-05-25 08:18:22 DEBUG Shibboleth.SessionCache [17461] [default]: storing new session...
2020-05-25 08:18:22 DEBUG XMLTooling.StorageService [17461] [default]: inserted record (session) in context (_91c3f50eb4a94a73df5a40edb92586dc) with expiration (1590398302)
2020-05-25 08:18:22 DEBUG XMLTooling.StorageService [17461] [default]: updated record (tstahl@sysob.com) in context (NameID) with expiration (1590423502)
2020-05-25 08:18:22 INFO Shibboleth.SessionCache [17461] [default]: new session created: ID (_91c3f50eb4a94a73df5a40edb92586dc) IdP (http://www.okta.com/exk40838kovfTKItv357) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 08:18:22 DEBUG Shibboleth.SSO.SAML2 [17461] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:18:22 DEBUG Shibboleth.Listener [17461]: dispatching message (default::getHeaders::Application)
2020-05-25 08:18:22 DEBUG Shibboleth.Listener [17461] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:18:22 DEBUG XMLTooling.StorageService [17461] [default]: updated expiration of valid records in context (_91c3f50eb4a94a73df5a40edb92586dc) to (1590398302)
2020-05-25 08:18:23 DEBUG Shibboleth.Listener [17461] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:18:23 DEBUG XMLTooling.StorageService [17461] [default]: updated expiration of valid records in context (_91c3f50eb4a94a73df5a40edb92586dc) to (1590398303)
2020-05-25 08:20:24 INFO Shibboleth.Listener [17461]: detected socket closure, shutting down worker thread
2020-05-25 08:24:14 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2020-05-25 08:24:45 INFO XMLTooling.StorageService : purged 12 expired record(s) from storage
2020-05-25 08:25:51 DEBUG Shibboleth.Listener [17462] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:25:51 DEBUG Shibboleth.Listener [17462] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 08:25:51 DEBUG Shibboleth.SessionCache [17462] [default]: searching for session (_91c3f50eb4a94a73df5a40edb92586dc)
2020-05-25 08:25:51 DEBUG Shibboleth.SessionCache [17462] [default]: reconstituting session and checking validity
2020-05-25 08:25:51 INFO Shibboleth.LogoutInitiator.SAML2 [17462] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (http://www.okta.com/exk40838kovfTKItv357).
2020-05-25 08:25:51 DEBUG Shibboleth.Listener [17462] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:25:51 DEBUG Shibboleth.SessionCache [17462] [default]: searching for session (_91c3f50eb4a94a73df5a40edb92586dc)
2020-05-25 08:25:51 DEBUG Shibboleth.SessionCache [17462] [default]: reconstituting session and checking validity
2020-05-25 08:25:51 INFO Shibboleth.SessionCache [17462] [default]: removed session (_91c3f50eb4a94a73df5a40edb92586dc)
2020-05-25 08:33:00 INFO Shibboleth.Listener [17462]: detected socket closure, shutting down worker thread
2020-05-25 08:50:25 DEBUG Shibboleth.Listener [17463] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:50:25 DEBUG XMLTooling.StorageService [17463] [default]: inserted record (d9dff92233cd72a554031e1589d0f746a8ad830927d37a531b58520264e8e68d) in context (RelayState) with expiration (1590397225)
2020-05-25 08:50:25 DEBUG OpenSAML.MessageEncoder.SAML2POST [17463] [default]: validating input
2020-05-25 08:50:25 DEBUG OpenSAML.MessageEncoder.SAML2POST [17463] [default]: marshalling the message
2020-05-25 08:50:25 DEBUG OpenSAML.MessageEncoder.SAML2POST [17463] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://myeasyaccess.clavister.com/saml/authenticate/sso_up" ID="_7dd951c38a52ee2dc32829d95f6b7135" IssueInstant="2020-05-25T08:50:25Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 08:50:25 DEBUG OpenSAML.MessageEncoder.SAML2POST [17463] [default]: message encoded, sending HTML form template to client
2020-05-25 08:50:35 INFO Shibboleth.Listener [17463]: detected socket closure, shutting down worker thread
2020-05-25 08:50:39 DEBUG Shibboleth.Listener [17464] [default]: dispatching message (default/SAML2/POST)
2020-05-25 08:50:39 DEBUG OpenSAML.MessageDecoder.SAML2POST [17464] [default]: validating input
2020-05-25 08:50:39 DEBUG OpenSAML.MessageDecoder.SAML2POST [17464] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_977146c671c774a349a1a52cc0b8311f" InResponseTo="_7dd951c38a52ee2dc32829d95f6b7135" IssueInstant="2020-05-25T08:50:33Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_977146c671c774a349a1a52cc0b8311f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>oqKcBZDPQ5UVo/D17UcUHqCSfo8=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>rnsGnyG6C8KZehh8BmXeKJeOICbj6wuVdTwXm46O76DUbQEkSjfDGggoskIAdfzxKZv+kflc4IoTmae2ktGzmAhDa1haM3YD3179oI2cslCHcFoRp5e4JSybfGXWVuA0dAKMg8VA7rnAXdio5m2O0dz9tAAtBl32oDGeupDa7q7lAmZz6m/Q7rzBFsYar1mlLHgIe8TgU/t4VIAozpQcZJSVMwY9iC7VZatq4Cu8jv5gIwbAnshs2ugPkBlNf70rDg+4VjycX33hQaOYrw61yr5hbCZHE8DPbYLWs4U6yJE8GZP5d067dOSeGk4Q0JsEDTFnX4eiPEjbYg8iGLMy4A==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIID5zCCAs+gAwIBAgIUZUN2q7bFfw9fhFexyCROyUKb8GAwDQYJKoZIhvcNAQELBQAwgYExCzAJ
BgNVBAYTAlNFMRUwEwYDVQQHDAxPcm5za29sZHN2aWsxFTATBgNVBAoMDENsYXZpc3RlciBBQjEj
MCEGA1UEAwwabXllYXN5YWNjZXNzLmNsYXZpc3Rlci5jb20xHzAdBgkqhkiG9w0BCQEWEGl0QGNs
YXZpc3Rlci5jb20wIBcNMjAwNTE5MDYyNDEwWhgPMjEyMDA0MjUwNjI0MTBaMIGBMQswCQYDVQQG
EwJTRTEVMBMGA1UEBwwMT3Juc2tvbGRzdmlrMRUwEwYDVQQKDAxDbGF2aXN0ZXIgQUIxIzAhBgNV
BAMMGm15ZWFzeWFjY2Vzcy5jbGF2aXN0ZXIuY29tMR8wHQYJKoZIhvcNAQkBFhBpdEBjbGF2aXN0
ZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFsDxpZO3BtOK/7jBXR0n0+a
4DJKlvB3oxZmxxT0x1DdupgPU3qvhhK9oVqctIq24pbABQU9Fm8vbFqQUMhWZrDyo/iU77qW1Nn4
VCyOyAfzlbOw2v8iM9EJ2BysHLxxPrx6nnmLa71M/8Qi+NVIfgjg1DIMOE/hlhplHGLqNeRlE+D0
vpjxPVE64Aw9pP2oPwLf+5VxPpgUWd+bDwyavQM80sprgi33tycIafQsAThNmQaTqbf5tmsCdHRv
Xe4zmnyGQE3oukdG6vrc/TSleElFJ+JL6e/osqYAJWOTge1N4wVe4atSf5idy0Gfr0c2WaK66pfz
w8JdCjiryU+MNwIDAQABo1MwUTAdBgNVHQ4EFgQUUDZof46AlQATGqrr5pXZVGAdvd0wHwYDVR0j
BBgwFoAUUDZof46AlQATGqrr5pXZVGAdvd0wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsF
AAOCAQEAoE1bRDHLR0tjO/6fJlcyR9e7SD0YX6IyL+Vvovdsxfbw9WshwhS65yUXCtuLZmLUN4Xl
0KUrzF+HLmZndGN3cVKvLRk5m3dvzwTqXDPz8Zq/v6ruuY92hcKvC15jjKNvz+rTwxwTpOHHlLyC
v8nmoAw6x9gaOHPwbBVnAdI0NIJ9ChO1fZ86YZFI+SQA6Ug9UMfgi5zLkM/C0VMXD993oHDlP/rS
CUV2T6SWO6GTwB9Il+A451pCLiruVouDNjY7GsVuTgBjdxOpnvShBQOyjeNc3mDGgYsAw8TYM1aO
SwErwjsQrrtWTeyKvnrONsGKotqBkmWAtYzcjVQImo/xOQ==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_ffe4208945e9d5c0da2244fdbb4d5bc4" IssueInstant="2020-05-25T08:50:33Z" Version="2.0"><saml2:Issuer>https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jadu-clavister</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_7dd951c38a52ee2dc32829d95f6b7135" NotOnOrAfter="2020-05-25T08:52:33Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T08:50:33Z" NotOnOrAfter="2020-05-25T08:52:33Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T08:50:33Z" SessionIndex="e53aefd4-30ac-4585-b4d1-4d8661935acc"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 08:50:39 DEBUG OpenSAML.MessageDecoder.SAML2 [17464] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:50:39 DEBUG OpenSAML.MessageDecoder.SAML2 [17464] [default]: message from (https://myeasyaccess.clavister.com/saml/authenticate/sso_up)
2020-05-25 08:50:39 DEBUG OpenSAML.MessageDecoder.SAML2 [17464] [default]: searching metadata for message issuer...
2020-05-25 08:50:39 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17464] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:50:39 DEBUG XMLTooling.StorageService [17464] [default]: inserted record (_977146c671c774a349a1a52cc0b8311f) in context (MessageFlow) with expiration (1590396873)
2020-05-25 08:50:39 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17464] [default]: validating signature profile
2020-05-25 08:50:39 DEBUG XMLTooling.KeyInfoResolver.Inline [17464] [default]: resolving ds:X509Certificate
2020-05-25 08:50:39 DEBUG XMLTooling.KeyInfoResolver.Inline [17464] [default]: resolved 1 certificate(s)
2020-05-25 08:50:39 DEBUG XMLTooling.KeyInfoResolver.Inline [17464] [default]: resolved 0 CRL(s)
2020-05-25 08:50:39 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17464] [default]: signature verified against message issuer
2020-05-25 08:50:39 DEBUG Shibboleth.SSO.SAML2 [17464] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:50:39 DEBUG Shibboleth.SSO.SAML2 [17464] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:50:39 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17464] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:50:39 DEBUG XMLTooling.StorageService [17464] [default]: inserted record (_ffe4208945e9d5c0da2244fdbb4d5bc4) in context (MessageFlow) with expiration (1590396873)
2020-05-25 08:50:39 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17464] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:50:39 DEBUG Shibboleth.SSO.SAML2 [17464] [default]: SSO profile processing completed successfully
2020-05-25 08:50:39 DEBUG Shibboleth.SSO.SAML2 [17464] [default]: extracting pushed attributes...
2020-05-25 08:50:39 DEBUG Shibboleth.AttributeExtractor.XML [17464] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:50:39 DEBUG Shibboleth.AttributeExtractor.XML [17464] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:50:39 DEBUG Shibboleth.AttributeExtractor.XML [17464] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:50:39 DEBUG Shibboleth.SessionCache [17464] [default]: creating new session
2020-05-25 08:50:39 DEBUG Shibboleth.SessionCache [17464] [default]: storing new session...
2020-05-25 08:50:39 DEBUG XMLTooling.StorageService [17464] [default]: inserted record (session) in context (_3cb2ec70302dfec654942a21b8b5fd1d) with expiration (1590400239)
2020-05-25 08:50:39 DEBUG XMLTooling.StorageService [17464] [default]: updated record (jadu-clavister) in context (NameID) with expiration (1590425439)
2020-05-25 08:50:39 INFO Shibboleth.SessionCache [17464] [default]: new session created: ID (_3cb2ec70302dfec654942a21b8b5fd1d) IdP (https://myeasyaccess.clavister.com/saml/authenticate/sso_up) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.28.90)
2020-05-25 08:50:39 DEBUG XMLTooling.StorageService [17464] [default]: deleted record (d9dff92233cd72a554031e1589d0f746a8ad830927d37a531b58520264e8e68d) in context (RelayState)
2020-05-25 08:50:39 DEBUG Shibboleth.SSO.SAML2 [17464] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:50:39 DEBUG Shibboleth.Listener [17464]: dispatching message (default::getHeaders::Application)
2020-05-25 08:50:39 DEBUG Shibboleth.Listener [17464] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:50:39 DEBUG XMLTooling.StorageService [17464] [default]: updated expiration of valid records in context (_3cb2ec70302dfec654942a21b8b5fd1d) to (1590400239)
2020-05-25 08:50:40 DEBUG Shibboleth.Listener [17464] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:50:40 DEBUG XMLTooling.StorageService [17464] [default]: updated expiration of valid records in context (_3cb2ec70302dfec654942a21b8b5fd1d) to (1590400240)
2020-05-25 08:50:56 INFO Shibboleth.Listener [17464]: detected socket closure, shutting down worker thread
2020-05-25 08:54:13 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2020-05-25 08:54:43 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2020-05-25 08:56:23 DEBUG Shibboleth.Listener [17465] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:56:23 DEBUG Shibboleth.Listener [17465] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 08:56:23 DEBUG Shibboleth.SessionCache [17465] [default]: searching for session (_3cb2ec70302dfec654942a21b8b5fd1d)
2020-05-25 08:56:23 DEBUG Shibboleth.SessionCache [17465] [default]: reconstituting session and checking validity
2020-05-25 08:56:23 INFO Shibboleth.LogoutInitiator.SAML2 [17465] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (https://myeasyaccess.clavister.com/saml/authenticate/sso_up).
2020-05-25 08:56:23 DEBUG Shibboleth.Listener [17465] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:56:23 DEBUG Shibboleth.SessionCache [17465] [default]: searching for session (_3cb2ec70302dfec654942a21b8b5fd1d)
2020-05-25 08:56:23 DEBUG Shibboleth.SessionCache [17465] [default]: reconstituting session and checking validity
2020-05-25 08:56:23 INFO Shibboleth.SessionCache [17465] [default]: removed session (_3cb2ec70302dfec654942a21b8b5fd1d)
2020-05-25 08:56:35 INFO Shibboleth.Listener [17465]: detected socket closure, shutting down worker thread
2020-05-25 08:56:41 DEBUG Shibboleth.Listener [17466] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 08:56:41 DEBUG XMLTooling.StorageService [17466] [default]: inserted record (1fb015539f859a3f2fc21058e3eb134424b4ab5a66bfa208fd65d66f81ee9c81) in context (RelayState) with expiration (1590397601)
2020-05-25 08:56:41 DEBUG OpenSAML.MessageEncoder.SAML2POST [17466] [default]: validating input
2020-05-25 08:56:41 DEBUG OpenSAML.MessageEncoder.SAML2POST [17466] [default]: marshalling the message
2020-05-25 08:56:41 DEBUG OpenSAML.MessageEncoder.SAML2POST [17466] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://myeasyaccess.clavister.com/saml/authenticate/sso_up" ID="_be486ddaa9170d94d3fa9a6f33951ae9" IssueInstant="2020-05-25T08:56:41Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 08:56:41 DEBUG OpenSAML.MessageEncoder.SAML2POST [17466] [default]: message encoded, sending HTML form template to client
2020-05-25 08:56:44 DEBUG Shibboleth.Listener [17466] [default]: dispatching message (default/SAML2/POST)
2020-05-25 08:56:44 DEBUG OpenSAML.MessageDecoder.SAML2POST [17466] [default]: validating input
2020-05-25 08:56:44 DEBUG OpenSAML.MessageDecoder.SAML2POST [17466] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_98fc3ce0a4bc58eb1cae07da1f693326" InResponseTo="_be486ddaa9170d94d3fa9a6f33951ae9" IssueInstant="2020-05-25T08:56:39Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_98fc3ce0a4bc58eb1cae07da1f693326"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>cm9pdfIuziEOn7c4fyjLfZjoEsI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>Sco0tBbLXz5lpKeNADshkQdp+T3PbDxZejw+ataqPohsHaMZx4Fi8PPbfqxlmbmUCpgXECOQt2Ru/Q+ho348vaAgPeaR0kfucj4hYi/qTQoF9J69mbu11xCBHPFhQqzwPc8lyvaceQq3zpp8Cu4ZUvfW9BWKBG2HXKwhqdYbJGLKol7yXSrzPNFMn5UZWNuVHIMMOsiBj6CGWclzpDxlsBEs3jawNbiUraXBLqAda4Hze58zX7GWoJzEe5WlEUrQO+wTO7ZugwhGyRy/ErCBrpNzHzyASyyvjPevKWwCXxRuy+EZBZ9zf2whCTpKNgYm6Uj40I8smjnjw1GAJbQmjA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIID5zCCAs+gAwIBAgIUZUN2q7bFfw9fhFexyCROyUKb8GAwDQYJKoZIhvcNAQELBQAwgYExCzAJ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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_c74d6003855592fabd7b2567a0e61d93" IssueInstant="2020-05-25T08:56:39Z" Version="2.0"><saml2:Issuer>https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jadu-clavister</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_be486ddaa9170d94d3fa9a6f33951ae9" NotOnOrAfter="2020-05-25T08:58:39Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T08:56:39Z" NotOnOrAfter="2020-05-25T08:58:39Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T08:56:39Z" SessionIndex="e53aefd4-30ac-4585-b4d1-4d8661935acc"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 08:56:44 DEBUG OpenSAML.MessageDecoder.SAML2 [17466] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 08:56:44 DEBUG OpenSAML.MessageDecoder.SAML2 [17466] [default]: message from (https://myeasyaccess.clavister.com/saml/authenticate/sso_up)
2020-05-25 08:56:44 DEBUG OpenSAML.MessageDecoder.SAML2 [17466] [default]: searching metadata for message issuer...
2020-05-25 08:56:44 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17466] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:56:44 DEBUG XMLTooling.StorageService [17466] [default]: inserted record (_98fc3ce0a4bc58eb1cae07da1f693326) in context (MessageFlow) with expiration (1590397239)
2020-05-25 08:56:44 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17466] [default]: validating signature profile
2020-05-25 08:56:44 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17466] [default]: signature verified against message issuer
2020-05-25 08:56:44 DEBUG Shibboleth.SSO.SAML2 [17466] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 08:56:44 DEBUG Shibboleth.SSO.SAML2 [17466] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 08:56:44 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17466] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 08:56:44 DEBUG XMLTooling.StorageService [17466] [default]: inserted record (_c74d6003855592fabd7b2567a0e61d93) in context (MessageFlow) with expiration (1590397239)
2020-05-25 08:56:44 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17466] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 08:56:44 DEBUG Shibboleth.SSO.SAML2 [17466] [default]: SSO profile processing completed successfully
2020-05-25 08:56:44 DEBUG Shibboleth.SSO.SAML2 [17466] [default]: extracting pushed attributes...
2020-05-25 08:56:44 DEBUG Shibboleth.AttributeExtractor.XML [17466] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 08:56:44 DEBUG Shibboleth.AttributeExtractor.XML [17466] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 08:56:44 DEBUG Shibboleth.AttributeExtractor.XML [17466] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 08:56:44 DEBUG Shibboleth.SessionCache [17466] [default]: creating new session
2020-05-25 08:56:44 DEBUG Shibboleth.SessionCache [17466] [default]: storing new session...
2020-05-25 08:56:44 DEBUG XMLTooling.StorageService [17466] [default]: inserted record (session) in context (_6a1d3a2b1d446adedb9f1d4db637912e) with expiration (1590400604)
2020-05-25 08:56:44 DEBUG XMLTooling.StorageService [17466] [default]: updated record (jadu-clavister) in context (NameID) with expiration (1590425804)
2020-05-25 08:56:44 INFO Shibboleth.SessionCache [17466] [default]: new session created: ID (_6a1d3a2b1d446adedb9f1d4db637912e) IdP (https://myeasyaccess.clavister.com/saml/authenticate/sso_up) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 08:56:44 DEBUG XMLTooling.StorageService [17466] [default]: deleted record (1fb015539f859a3f2fc21058e3eb134424b4ab5a66bfa208fd65d66f81ee9c81) in context (RelayState)
2020-05-25 08:56:44 DEBUG Shibboleth.SSO.SAML2 [17466] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 08:56:45 DEBUG Shibboleth.Listener [17466]: dispatching message (default::getHeaders::Application)
2020-05-25 08:56:45 DEBUG Shibboleth.Listener [17466] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:56:45 DEBUG XMLTooling.StorageService [17466] [default]: updated expiration of valid records in context (_6a1d3a2b1d446adedb9f1d4db637912e) to (1590400605)
2020-05-25 08:56:46 DEBUG Shibboleth.Listener [17466] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 08:56:46 DEBUG XMLTooling.StorageService [17466] [default]: updated expiration of valid records in context (_6a1d3a2b1d446adedb9f1d4db637912e) to (1590400606)
2020-05-25 08:57:14 INFO Shibboleth.Listener [17466]: detected socket closure, shutting down worker thread
2020-05-25 08:59:29 DEBUG Shibboleth.Listener [17467] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 08:59:29 DEBUG Shibboleth.Listener [17467] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 08:59:29 DEBUG Shibboleth.SessionCache [17467] [default]: searching for session (_6a1d3a2b1d446adedb9f1d4db637912e)
2020-05-25 08:59:29 DEBUG Shibboleth.SessionCache [17467] [default]: reconstituting session and checking validity
2020-05-25 08:59:29 INFO Shibboleth.LogoutInitiator.SAML2 [17467] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (https://myeasyaccess.clavister.com/saml/authenticate/sso_up).
2020-05-25 08:59:29 DEBUG Shibboleth.Listener [17467] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 08:59:29 DEBUG Shibboleth.SessionCache [17467] [default]: searching for session (_6a1d3a2b1d446adedb9f1d4db637912e)
2020-05-25 08:59:29 DEBUG Shibboleth.SessionCache [17467] [default]: reconstituting session and checking validity
2020-05-25 08:59:29 INFO Shibboleth.SessionCache [17467] [default]: removed session (_6a1d3a2b1d446adedb9f1d4db637912e)
2020-05-25 09:00:06 DEBUG Shibboleth.Listener [17468] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 09:00:06 DEBUG XMLTooling.StorageService [17468] [default]: inserted record (29fb08d69327302724b2a6dc1cfa5e0378fcdd78bab88f207e903057e02858f2) in context (RelayState) with expiration (1590397806)
2020-05-25 09:00:06 DEBUG OpenSAML.MessageEncoder.SAML2POST [17468] [default]: validating input
2020-05-25 09:00:06 DEBUG OpenSAML.MessageEncoder.SAML2POST [17468] [default]: marshalling the message
2020-05-25 09:00:06 DEBUG OpenSAML.MessageEncoder.SAML2POST [17468] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://myeasyaccess.clavister.com/saml/authenticate/sso_up" ID="_58c4db080ab2a0623ce2128d1fcda897" IssueInstant="2020-05-25T09:00:06Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 09:00:06 DEBUG OpenSAML.MessageEncoder.SAML2POST [17468] [default]: message encoded, sending HTML form template to client
2020-05-25 09:00:10 DEBUG Shibboleth.Listener [17468] [default]: dispatching message (default/SAML2/POST)
2020-05-25 09:00:10 DEBUG OpenSAML.MessageDecoder.SAML2POST [17468] [default]: validating input
2020-05-25 09:00:10 DEBUG OpenSAML.MessageDecoder.SAML2POST [17468] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_a022e4a3d7f57d4d579ba1243efb6bdb" InResponseTo="_58c4db080ab2a0623ce2128d1fcda897" IssueInstant="2020-05-25T09:00:05Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_a022e4a3d7f57d4d579ba1243efb6bdb"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>+E+OKMnEcROT92V7PkTE/EIEMO0=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>FcQQD8ZndTBYeaklgOeliz/HWbZljFfRXferqyBWJGxKhDXCZD6jq7OW3AiK5fTZ71XUrYLs8bwGS0eAeXRHDDZsY9FqqobOw4EyuHQyR++Ke0o0qjEML33qL/sO/rdFKg+572Y8HjyT68cHpl+0dJNJYso7h8pF6xO9GTzdH9CccB3YH0qkZA0QK2IxvnKQp5u1FXEb5eVI8FWfMsrR0oceL/ybXJPS/M+npFYOdqRYmiHkaqycWJ0Vc16vQ06utmkh+KeDU3Vs7ngo7Hp3ZtsJwqknD1PvH5uxqwXGrlTd2knJ4rLeL3bQVgT0KwpyvaZjuPbQxe9HK6CQupbAJQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIID5zCCAs+gAwIBAgIUZUN2q7bFfw9fhFexyCROyUKb8GAwDQYJKoZIhvcNAQELBQAwgYExCzAJ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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_0edf9fe2745a7117d122efc214d23d4b" IssueInstant="2020-05-25T09:00:05Z" Version="2.0"><saml2:Issuer>https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jadu-clavister</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_58c4db080ab2a0623ce2128d1fcda897" NotOnOrAfter="2020-05-25T09:02:05Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T09:00:05Z" NotOnOrAfter="2020-05-25T09:02:05Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T09:00:05Z" SessionIndex="e53aefd4-30ac-4585-b4d1-4d8661935acc"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 09:00:10 DEBUG OpenSAML.MessageDecoder.SAML2 [17468] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 09:00:10 DEBUG OpenSAML.MessageDecoder.SAML2 [17468] [default]: message from (https://myeasyaccess.clavister.com/saml/authenticate/sso_up)
2020-05-25 09:00:10 DEBUG OpenSAML.MessageDecoder.SAML2 [17468] [default]: searching metadata for message issuer...
2020-05-25 09:00:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17468] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 09:00:10 DEBUG XMLTooling.StorageService [17468] [default]: inserted record (_a022e4a3d7f57d4d579ba1243efb6bdb) in context (MessageFlow) with expiration (1590397445)
2020-05-25 09:00:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17468] [default]: validating signature profile
2020-05-25 09:00:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17468] [default]: signature verified against message issuer
2020-05-25 09:00:10 DEBUG Shibboleth.SSO.SAML2 [17468] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 09:00:10 DEBUG Shibboleth.SSO.SAML2 [17468] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 09:00:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17468] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 09:00:10 DEBUG XMLTooling.StorageService [17468] [default]: inserted record (_0edf9fe2745a7117d122efc214d23d4b) in context (MessageFlow) with expiration (1590397445)
2020-05-25 09:00:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17468] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 09:00:10 DEBUG Shibboleth.SSO.SAML2 [17468] [default]: SSO profile processing completed successfully
2020-05-25 09:00:10 DEBUG Shibboleth.SSO.SAML2 [17468] [default]: extracting pushed attributes...
2020-05-25 09:00:10 DEBUG Shibboleth.AttributeExtractor.XML [17468] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 09:00:10 DEBUG Shibboleth.AttributeExtractor.XML [17468] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 09:00:10 DEBUG Shibboleth.AttributeExtractor.XML [17468] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 09:00:10 DEBUG Shibboleth.SessionCache [17468] [default]: creating new session
2020-05-25 09:00:10 DEBUG Shibboleth.SessionCache [17468] [default]: storing new session...
2020-05-25 09:00:10 DEBUG XMLTooling.StorageService [17468] [default]: inserted record (session) in context (_f18a4998058d03595ace227b2ed86849) with expiration (1590400810)
2020-05-25 09:00:10 DEBUG XMLTooling.StorageService [17468] [default]: updated record (jadu-clavister) in context (NameID) with expiration (1590426010)
2020-05-25 09:00:10 INFO Shibboleth.SessionCache [17468] [default]: new session created: ID (_f18a4998058d03595ace227b2ed86849) IdP (https://myeasyaccess.clavister.com/saml/authenticate/sso_up) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 09:00:10 DEBUG XMLTooling.StorageService [17468] [default]: deleted record (29fb08d69327302724b2a6dc1cfa5e0378fcdd78bab88f207e903057e02858f2) in context (RelayState)
2020-05-25 09:00:10 DEBUG Shibboleth.SSO.SAML2 [17468] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 09:00:11 DEBUG Shibboleth.Listener [17468]: dispatching message (default::getHeaders::Application)
2020-05-25 09:00:11 DEBUG Shibboleth.Listener [17468] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 09:00:11 DEBUG XMLTooling.StorageService [17468] [default]: updated expiration of valid records in context (_f18a4998058d03595ace227b2ed86849) to (1590400811)
2020-05-25 09:00:11 DEBUG Shibboleth.Listener [17468] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 09:00:11 DEBUG XMLTooling.StorageService [17468] [default]: updated expiration of valid records in context (_f18a4998058d03595ace227b2ed86849) to (1590400811)
2020-05-25 09:01:32 INFO Shibboleth.Listener [17467]: detected socket closure, shutting down worker thread
2020-05-25 09:03:07 INFO Shibboleth.Listener [17468]: detected socket closure, shutting down worker thread
2020-05-25 09:05:18 DEBUG Shibboleth.Listener [17469] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 09:05:18 DEBUG Shibboleth.Listener [17469] [default]: dispatching message (default/Logout::run::SAML2LI)
2020-05-25 09:05:18 DEBUG Shibboleth.SessionCache [17469] [default]: searching for session (_f18a4998058d03595ace227b2ed86849)
2020-05-25 09:05:18 DEBUG Shibboleth.SessionCache [17469] [default]: reconstituting session and checking validity
2020-05-25 09:05:18 INFO Shibboleth.LogoutInitiator.SAML2 [17469] [default]: unable to issue SAML 2.0 logout request: No SingleLogoutService endpoints in metadata for identity provider (https://myeasyaccess.clavister.com/saml/authenticate/sso_up).
2020-05-25 09:05:18 DEBUG Shibboleth.Listener [17469] [default]: dispatching message (default/Logout::run::LocalLI)
2020-05-25 09:05:18 DEBUG Shibboleth.SessionCache [17469] [default]: searching for session (_f18a4998058d03595ace227b2ed86849)
2020-05-25 09:05:18 DEBUG Shibboleth.SessionCache [17469] [default]: reconstituting session and checking validity
2020-05-25 09:05:18 INFO Shibboleth.SessionCache [17469] [default]: removed session (_f18a4998058d03595ace227b2ed86849)
2020-05-25 09:05:38 DEBUG Shibboleth.Listener [17470] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 09:05:38 DEBUG XMLTooling.StorageService [17470] [default]: inserted record (14d383a644925781cdebde597e60fe552c383080fb816809a55ff59c03347295) in context (RelayState) with expiration (1590398138)
2020-05-25 09:05:38 DEBUG OpenSAML.MessageEncoder.SAML2POST [17470] [default]: validating input
2020-05-25 09:05:38 DEBUG OpenSAML.MessageEncoder.SAML2POST [17470] [default]: marshalling the message
2020-05-25 09:05:38 DEBUG OpenSAML.MessageEncoder.SAML2POST [17470] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://myeasyaccess.clavister.com/saml/authenticate/sso_up" ID="_aa0422325bd7c3e5edb8ebde8b59dc99" IssueInstant="2020-05-25T09:05:38Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 09:05:38 DEBUG OpenSAML.MessageEncoder.SAML2POST [17470] [default]: message encoded, sending HTML form template to client
2020-05-25 09:05:42 DEBUG Shibboleth.Listener [17471] [default]: dispatching message (default/SAML2/POST)
2020-05-25 09:05:42 DEBUG OpenSAML.MessageDecoder.SAML2POST [17471] [default]: validating input
2020-05-25 09:05:42 DEBUG OpenSAML.MessageDecoder.SAML2POST [17471] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_e6ebe4ab20c0099efa492378741a8c1c" InResponseTo="_aa0422325bd7c3e5edb8ebde8b59dc99" IssueInstant="2020-05-25T09:05:37Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_e6ebe4ab20c0099efa492378741a8c1c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>6H3JRi3FfyGRKCP3KyvsG828wsU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>JLyKc3nOUuMiZGPhSJiphfULcGpwDkvf3kYwF+jeVIvE83AiuCZD62OHgY/ptNd+2Ukto5ZK8klAi9RHkHrXopzmPwUZWfqsjZ/DVPMHXIzYQLqYUiCNUlqu1eqK53jZ2ImDuqcdeSrOaSi8Cj1BEA3JI/dncvBvgndTO8sAQ+gcJ8w5DoFBPKufzjo4Aq9B3b5Xt9d62ENwJsclPrE3gSNtwDUJVmzQA3hByW1cVmItSXLmBqJAh63fWDMi89dy/KxwZXe5wL1EJcPIoQV/fhmBlIqTrSIdmUSn5XO1t/KwiOGx3x/8L2CfVitQND1XhdoeQD9HHKZQRBON2o5acQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIID5zCCAs+gAwIBAgIUZUN2q7bFfw9fhFexyCROyUKb8GAwDQYJKoZIhvcNAQELBQAwgYExCzAJ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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_54068c2705f53408d28d6c9b30d6bd71" IssueInstant="2020-05-25T09:05:37Z" Version="2.0"><saml2:Issuer>https://myeasyaccess.clavister.com/saml/authenticate/sso_up</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">jadu-clavister</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_aa0422325bd7c3e5edb8ebde8b59dc99" NotOnOrAfter="2020-05-25T09:07:37Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2020-05-25T09:05:37Z" NotOnOrAfter="2020-05-25T09:07:37Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2020-05-25T09:05:37Z" SessionIndex="e53aefd4-30ac-4585-b4d1-4d8661935acc"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2020-05-25 09:05:42 DEBUG OpenSAML.MessageDecoder.SAML2 [17471] [default]: extracting issuer from SAML 2.0 protocol message
2020-05-25 09:05:42 DEBUG OpenSAML.MessageDecoder.SAML2 [17471] [default]: message from (https://myeasyaccess.clavister.com/saml/authenticate/sso_up)
2020-05-25 09:05:42 DEBUG OpenSAML.MessageDecoder.SAML2 [17471] [default]: searching metadata for message issuer...
2020-05-25 09:05:42 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17471] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 09:05:42 DEBUG XMLTooling.StorageService [17471] [default]: inserted record (_e6ebe4ab20c0099efa492378741a8c1c) in context (MessageFlow) with expiration (1590397777)
2020-05-25 09:05:42 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17471] [default]: validating signature profile
2020-05-25 09:05:42 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [17471] [default]: signature verified against message issuer
2020-05-25 09:05:42 DEBUG Shibboleth.SSO.SAML2 [17471] [default]: processing message against SAML 2.0 SSO profile
2020-05-25 09:05:42 DEBUG Shibboleth.SSO.SAML2 [17471] [default]: extracting issuer from SAML 2.0 assertion
2020-05-25 09:05:42 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [17471] [default]: evaluating message flow policy (replay checking on, expiration 60)
2020-05-25 09:05:42 DEBUG XMLTooling.StorageService [17471] [default]: inserted record (_54068c2705f53408d28d6c9b30d6bd71) in context (MessageFlow) with expiration (1590397777)
2020-05-25 09:05:42 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [17471] [default]: assertion satisfied bearer confirmation requirements
2020-05-25 09:05:42 DEBUG Shibboleth.SSO.SAML2 [17471] [default]: SSO profile processing completed successfully
2020-05-25 09:05:42 DEBUG Shibboleth.SSO.SAML2 [17471] [default]: extracting pushed attributes...
2020-05-25 09:05:42 DEBUG Shibboleth.AttributeExtractor.XML [17471] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2020-05-25 09:05:42 DEBUG Shibboleth.AttributeExtractor.XML [17471] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2020-05-25 09:05:42 DEBUG Shibboleth.AttributeExtractor.XML [17471] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2020-05-25 09:05:42 DEBUG Shibboleth.SessionCache [17471] [default]: creating new session
2020-05-25 09:05:42 DEBUG Shibboleth.SessionCache [17471] [default]: storing new session...
2020-05-25 09:05:42 DEBUG XMLTooling.StorageService [17471] [default]: inserted record (session) in context (_0eb8469ffd29a3dbb133d509433111ce) with expiration (1590401142)
2020-05-25 09:05:42 DEBUG XMLTooling.StorageService [17471] [default]: updated record (jadu-clavister) in context (NameID) with expiration (1590426342)
2020-05-25 09:05:42 INFO Shibboleth.SessionCache [17471] [default]: new session created: ID (_0eb8469ffd29a3dbb133d509433111ce) IdP (https://myeasyaccess.clavister.com/saml/authenticate/sso_up) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.7)
2020-05-25 09:05:42 DEBUG XMLTooling.StorageService [17471] [default]: deleted record (14d383a644925781cdebde597e60fe552c383080fb816809a55ff59c03347295) in context (RelayState)
2020-05-25 09:05:42 DEBUG Shibboleth.SSO.SAML2 [17471] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2020-05-25 09:05:43 DEBUG Shibboleth.Listener [17471]: dispatching message (default::getHeaders::Application)
2020-05-25 09:05:43 DEBUG Shibboleth.Listener [17471] [default]: dispatching message (find::StorageService::SessionCache)
2020-05-25 09:05:43 DEBUG XMLTooling.StorageService [17471] [default]: updated expiration of valid records in context (_0eb8469ffd29a3dbb133d509433111ce) to (1590401143)
2020-05-25 09:05:44 DEBUG Shibboleth.Listener [17471] [default]: dispatching message (touch::StorageService::SessionCache)
2020-05-25 09:05:44 DEBUG XMLTooling.StorageService [17471] [default]: updated expiration of valid records in context (_0eb8469ffd29a3dbb133d509433111ce) to (1590401144)
2020-05-25 09:06:01 INFO Shibboleth.Listener [17470]: detected socket closure, shutting down worker thread
2020-05-25 09:06:31 INFO Shibboleth.Listener [17471]: detected socket closure, shutting down worker thread
2020-05-25 09:09:42 INFO XMLTooling.StorageService : purged 9 expired record(s) from storage
2020-05-25 09:10:24 INFO Shibboleth.Listener [17469]: detected socket closure, shutting down worker thread
2020-05-25 09:24:12 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2020-05-25 09:32:46 DEBUG Shibboleth.Listener [17472] [default]: dispatching message (default/Login::run::SAML2SI)
2020-05-25 09:32:46 DEBUG XMLTooling.StorageService [17472] [default]: inserted record (8657ab0d2f45f8c3e93311d8d410c65191bf93dfa90e4c9e8b6abc88e746dada) in context (RelayState) with expiration (1590399766)
2020-05-25 09:32:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17472] [default]: validating input
2020-05-25 09:32:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17472] [default]: marshalling, deflating, base64-encoding the message
2020-05-25 09:32:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17472] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_9f8728abb9bd152a8041f7f4d2dbb2e5" IssueInstant="2020-05-25T09:32:46Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2020-05-25 09:32:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [17472] [default]: message encoded, sending redirect to client
2020-05-25 09:35:34 INFO Shibboleth.Listener [17472]: detected socket closure, shutting down worker thread
2020-05-25 09:54:11 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2020-05-25 09:54:39 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage