2019-02-18 08:49:50 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [39] [default]: message encoded, sending redirect to client
2019-02-18 08:49:54 DEBUG Shibboleth.Listener [39] [default]: dispatching message (default/SAML2/POST)
2019-02-18 08:49:54 DEBUG OpenSAML.MessageDecoder.SAML2POST [39] [default]: validating input
2019-02-18 08:49:54 DEBUG OpenSAML.MessageDecoder.SAML2POST [39] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_9081246061972510256" InResponseTo="_8a0dd53595a3b3a44fb6bf0cdc6c96aa" IssueInstant="2019-02-18T08:49:54.562Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://cas.example.org/ssoserver</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_9081246061972510256">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>kw7QWCs/GAXEzWD58EusKiLspYHe6jTyialjn5i2702fhqZ48gKVX3xGQK6ppXyAVQEWtIi8MsrW
LVTaxAHNWw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
acKZVg6wwwVzCXZTaDovsLhOkVngmI5BvOQ3UvUWJEZphiuJlxfCznGDFEP4Ha211+/ww9QF8Ypv
bHOD0LaVL/idQa80SmxB5739Iink3YqbuzDqTwDciqp1viS4y4jnVv/v/gv/CKAPPjvEwA/L8C3M
Ei7Ehd1gV8OUPAebEkabyrMYWCtdJafnrepU35iyc0QPrhl1aHeyONdUvfKKMGXkMWYn+9AO96Z5
+vUuNbihuLz4ArZz/Who2cM97djNTBcUf8i4KzxdgNcsVaQdxPFg1ckOxMTL/MVaAcgEyBOSGrh7
VradDtWZga9pqU5aCb0va4UrSmjHr9p6ntK5PQ==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDHTCCAgWgAwIBAgIUNsClbOBPdlurplA1uPYm/WMgv+swDQYJKoZIhvcNAQELBQAwGjEYMBYG
A1UEAwwPY2FzLmV4YW1wbGUub3JnMB4XDTE5MDExNjAzMDU1M1oXDTM5MDExNjAzMDU1M1owGjEY
MBYGA1UEAwwPY2FzLmV4YW1wbGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
qTjcFLN4Kb97OYs6FJNt4BbqTVHqY74SAebR8sXYzG6v1A8RiF6JQ/BI6RC69Q40Wjux5ne1aear
JKRA1INh8PvkPcLBAx3gKOxxmuzKoAdN7zVEIIh2N6SazeOjkZJnpci4c78zpnu9yEGo5RFbYlS0
yQsNK3pYUFsa4IzMOEotB9YH/d9C4nPu7740stkaKNLQCvGzeqiz4eF8R7v22dVZJm+DBwluveVC
ufO2TGb/5fTop+pdcYow6sqoXqXZx1mAPBwgvurFLDmfLyfZ+5c1eK6RyvThikIqrq35O2mQp9OK
Gi1gj0YPDYpcPKf6sAb1cjafjgAhvzjRpLLooQIDAQABo1swWTAdBgNVHQ4EFgQUmEDMb7BVL0bh
b+NX4A7ia/LTd4owOAYDVR0RBDEwL4IPY2FzLmV4YW1wbGUub3JnhhxjYXMuZXhhbXBsZS5vcmcv
aWRwL21ldGFkYXRhMA0GCSqGSIb3DQEBCwUAA4IBAQBci6mJIZ2Dduo9T/rLt2igWJdj8p+UdnbG
By4gqaWgTxJ0hApeQYUgk3Q66NHu1fWhggDhjDnC7mpqrduww21e4MBQkK43146uKgM6D9+DKYro
IMNtKaUXBfPA0/Gk3m9teMyUHL2xZBIFYGOgrW6dMQvB1n86+bP4OeGH3pqnEG0TT/n+F5y41i64
7i37yin0Oh/jO9eUIGqsuL9skRZpdM4mjuDVVdv8GBiQP5VVeNYbw4itEbmDJ+XQ6OI9ipx0EKhH
ggkDAvGxq0T23OyJf80SgrzNaoj3X+eUaUNu2TqbH3ZNrMrmbYK/QgwEXLPF6eAWVsZur8Fd4GXM
LW5h</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_4631714075265879363" IssueInstant="2019-02-18T08:49:54.533Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer>https://cas.example.org/ssoserver</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_4631714075265879363">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>zZxwH8vLlh9wrdf20rzNGdEBKxnPhowSRVJI0/9J9q3ItWgwKR9Lm0VCTzoAIxUyFfKrmWY49Okk
9BtE4FMv5A==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
AuhAkjF7sK1oVXJjI7sQNy832WanSp6HRtghsALUf+PT73qvsiGm/zH2u86HefNFf70ePnZNmkBN
NNoHo8+q669fzTXuQuv54t5CQ53jnj7cL28JNnbNH1yKqYm0zD0pVdCAvaY1F7rNB3+bo27gsOvC
JbpxIQeJW/HKWwCBknMXckkiXtXqXuW1/MqfevATwU2EwDsvyOnRuM+vxBlzwqMY1YPowrsd8J9m
3TgcMLo0FAcGwaxwu/OxG1Q7LCBj9YOUfVOze5Lx89vFlEYjCxfMrwRx3IuJhjMuRJ8R/VseEgWu
OK/HykO7kJ06mFVD7cmpDMs+ouDpjcskTDx2Ew==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDHTCCAgWgAwIBAgIUNsClbOBPdlurplA1uPYm/WMgv+swDQYJKoZIhvcNAQELBQAwGjEYMBYG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://samltest.id/saml/sp" SPNameQualifier="https://samltest.id/saml/sp">/YGI1R3W50kQU6wfh+gt/9PDyyY=</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_8a0dd53595a3b3a44fb6bf0cdc6c96aa" NotOnOrAfter="2019-02-18T09:39:54.533Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-02-18T08:49:54.535Z" NotOnOrAfter="2019-02-18T09:39:54.535Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-02-18T08:49:53.523Z" SessionIndex="_935722003415209067" SessionNotOnOrAfter="2019-02-18T09:39:53.523Z"><saml2:SubjectLocality Address="54.69.101.82"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="uid" Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>lihn</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="role" Name="role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>user</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="passwd" Name="passwd" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>111111</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="sex" Name="sex" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="roles" Name="roles" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>juse1</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="name" Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>李海宁</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="groups" Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>test</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="company" Name="company" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="tel" Name="tel" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="position" Name="position" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="email" Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>lihn@sohu.com</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-02-18 08:49:54 DEBUG OpenSAML.MessageDecoder.SAML2 [39] [default]: extracting issuer from SAML 2.0 protocol message
2019-02-18 08:49:54 DEBUG OpenSAML.MessageDecoder.SAML2 [39] [default]: message from (https://cas.example.org/ssoserver)
2019-02-18 08:49:54 DEBUG OpenSAML.MessageDecoder.SAML2 [39] [default]: searching metadata for message issuer...
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [39] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 08:49:54 DEBUG XMLTooling.StorageService [39] [default]: inserted record (_9081246061972510256) in context (MessageFlow) with expiration (1550480034)
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [39] [default]: validating signature profile
2019-02-18 08:49:54 DEBUG XMLTooling.KeyInfoResolver.Inline [39] [default]: resolving ds:X509Certificate
2019-02-18 08:49:54 DEBUG XMLTooling.KeyInfoResolver.Inline [39] [default]: resolved 1 certificate(s)
2019-02-18 08:49:54 DEBUG XMLTooling.KeyInfoResolver.Inline [39] [default]: resolved 0 CRL(s)
2019-02-18 08:49:54 DEBUG XMLTooling.KeyInfoResolver.Inline [39] [default]: resolving ds:X509Certificate
2019-02-18 08:49:54 DEBUG XMLTooling.KeyInfoResolver.Inline [39] [default]: resolved 1 certificate(s)
2019-02-18 08:49:54 DEBUG XMLTooling.KeyInfoResolver.Inline [39] [default]: resolved 0 CRL(s)
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [39] [default]: signature verified against message issuer
2019-02-18 08:49:54 DEBUG Shibboleth.SSO.SAML2 [39] [default]: processing message against SAML 2.0 SSO profile
2019-02-18 08:49:54 DEBUG Shibboleth.SSO.SAML2 [39] [default]: extracting issuer from SAML 2.0 assertion
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [39] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 08:49:54 DEBUG XMLTooling.StorageService [39] [default]: inserted record (_4631714075265879363) in context (MessageFlow) with expiration (1550480034)
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [39] [default]: validating signature profile
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [39] [default]: signature verified against message issuer
2019-02-18 08:49:54 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [39] [default]: assertion satisfied bearer confirmation requirements
2019-02-18 08:49:54 DEBUG Shibboleth.SSO.SAML2 [39] [default]: SSO profile processing completed successfully
2019-02-18 08:49:54 DEBUG Shibboleth.SSO.SAML2 [39] [default]: extracting pushed attributes...
2019-02-18 08:49:54 DEBUG Shibboleth.AttributeExtractor.XML [39] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-02-18 08:49:54 DEBUG Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-02-18 08:49:54 DEBUG Shibboleth.AttributeExtractor.XML [39] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: uid, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: passwd, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: sex, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: roles, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: name, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: groups, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: company, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: tel, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: position, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 INFO Shibboleth.AttributeExtractor.XML [39] [default]: skipping unmapped SAML 2.0 Attribute with Name: email, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:49:54 DEBUG Shibboleth.SessionCache [39] [default]: creating new session
2019-02-18 08:49:54 DEBUG Shibboleth.SessionCache [39] [default]: storing new session...
2019-02-18 08:49:54 DEBUG XMLTooling.StorageService [39] [default]: inserted record (session) in context (_12d1153235fe30ac43219bda8094346d) with expiration (1550483394)
2019-02-18 08:49:54 DEBUG XMLTooling.StorageService [39] [default]: inserted record (/YGI1R3W50kQU6wfh+gt/9PDyyY=) in context (NameID) with expiration (1550482973)
2019-02-18 08:49:54 INFO Shibboleth.SessionCache [39] [default]: new session created: ID (_12d1153235fe30ac43219bda8094346d) IdP (https://cas.example.org/ssoserver) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.33.243)
2019-02-18 08:49:54 DEBUG XMLTooling.StorageService [39] [default]: deleted record (a7eaba18eb5b3a731d8794b7f9c87ac1b0802f6bd8f2353e0a0ee861d21281c9) in context (RelayState)
2019-02-18 08:49:54 DEBUG Shibboleth.SSO.SAML2 [39] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-02-18 08:49:55 DEBUG Shibboleth.Listener [39]: dispatching message (default::getHeaders::Application)
2019-02-18 08:49:55 DEBUG Shibboleth.Listener [39] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 08:49:55 DEBUG XMLTooling.StorageService [39] [default]: updated expiration of valid records in context (_12d1153235fe30ac43219bda8094346d) to (1550483395)
2019-02-18 08:49:55 DEBUG Shibboleth.Listener [39] [default]: dispatching message (touch::StorageService::SessionCache)
2019-02-18 08:49:55 DEBUG XMLTooling.StorageService [39] [default]: updated expiration of valid records in context (_12d1153235fe30ac43219bda8094346d) to (1550483395)
2019-02-18 08:51:11 INFO Shibboleth.Listener [39]: detected socket closure, shutting down worker thread
2019-02-18 08:51:18 DEBUG Shibboleth.Listener [38] [default]: dispatching message (default/DiscoFeed)
2019-02-18 08:51:18 DEBUG Shibboleth.Handler.DiscoveryFeed [38] [default]: processing discovery feed request
2019-02-18 08:51:18 INFO OpenSAML.MetadataProvider.XML [38] [default]: change detected, signaling reload thread...
2019-02-18 08:51:18 INFO OpenSAML.MetadataProvider.XML : reloading local resource...
2019-02-18 08:51:19 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (/var/md/samltest.xml)
2019-02-18 08:53:09 DEBUG Shibboleth.Listener [40] [default]: dispatching message (default/Login::run::SAML2SI)
2019-02-18 08:53:09 DEBUG XMLTooling.StorageService [40] [default]: inserted record (e98a01a85525dd938c5648afc599866a94ca90c2fbf986f7f7a5c5686f89630b) in context (RelayState) with expiration (1550480589)
2019-02-18 08:53:09 DEBUG OpenSAML.MessageEncoder.SAML2POST [40] [default]: validating input
2019-02-18 08:53:09 DEBUG OpenSAML.MessageEncoder.SAML2POST [40] [default]: signing and marshalling the message
2019-02-18 08:53:09 DEBUG OpenSAML.MessageEncoder.SAML2POST [40] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://ec2-54-165-214-58.compute-1.amazonaws.com:7000/saml/authenticate/login" ID="_b7431fe74a4a7c5b91c363628f14ab00" IssueInstant="2019-02-18T08:53:09Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_b7431fe74a4a7c5b91c363628f14ab00">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>DJP6v7r3fj7dhIM3QA20MkXbAvgU9IJMpfDIo1vE7iU=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>poexdb+dOYmA7ULPCrbYlMEXagVkS7NQP0LdZt6mGcPh4u3a7vooYSsoSqbQPsbC
ORl1uJrN7u5P9b8aK8JgZLn0KobdIIKrr42mJKCeZCWYIAm5mbnPUjeeDp66KnAn
41Rx28M8WgzGiYXUCyX/xJkMJOXEymxOXiX5UK/QZeuRWa8tuBUkPG2SjcS4BD5p
q4QZgmy5cSbI3x0sPecPOODhNRSkbzDNaUPewWL4FxzUROlJYeszjEvwuY7CazE5
p6naIVYXTQvJw2DBh7bGU+BEv6/HEH7vmi+hqzwx0Lc+gXdvBAvjvzxZbKnQmYSv
TFepnpkueC6pEuUmVW9on9/8UCzFigd1qCmsMcohplXDgQd8IiYvzvisLEv8QMhJ
e6Jt/yGTYOnFEcEH/BAUsiRl6NwD+4A646nVO5YtX6TQ/oUrqNcvlyPfNfJACYY3
ueHNJVDAJo7c7f9j1xfq0wImwRFnPEYiCPjT1WbL0V7EnqhESmYTRNJ7xQGIiDWo</ds:SignatureValue>
<ds:KeyInfo><ds:KeyName>ip-172-31-28-64.us-west-2.compute.internal</ds:KeyName><ds:X509Data><ds:X509SubjectName>CN=ip-172-31-28-64.us-west-2.compute.internal</ds:X509SubjectName><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKmtzjCD1+tqMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNV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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-02-18 08:53:09 DEBUG OpenSAML.MessageEncoder.SAML2POST [40] [default]: message encoded, sending HTML form template to client
2019-02-18 08:53:53 DEBUG Shibboleth.Listener [41] [default]: dispatching message (default/Login::run::SAML2SI)
2019-02-18 08:53:53 DEBUG XMLTooling.StorageService [41] [default]: inserted record (033107cafb058a1083d6aa564111f1f1314038ef8f36c2fb4268602246e26157) in context (RelayState) with expiration (1550480633)
2019-02-18 08:53:53 DEBUG OpenSAML.MessageEncoder.SAML2POST [41] [default]: validating input
2019-02-18 08:53:53 DEBUG OpenSAML.MessageEncoder.SAML2POST [41] [default]: signing and marshalling the message
2019-02-18 08:53:53 DEBUG OpenSAML.MessageEncoder.SAML2POST [41] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://phenixid.local:8443/saml/authenticate/login" ID="_9307b5896c58f4451fd2d4c40115072b" IssueInstant="2019-02-18T08:53:53Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_9307b5896c58f4451fd2d4c40115072b">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>ZSW5A/TMCLaHZAMM7fb0HsPqwJsJb7pnuxI8o9x1Xxc=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>Gzpxh8O8EJY685SnavfhRds/xm61HNFFwmlrkh1GFPTdz5Jk8OhODtmwnKMybWw4
9tfhwMBM0FTMRgIn/3rcVkw6eKKefndLHG0wgTPBcAf7ws1UMrYv+p8B2gGQV2Kb
jf+0eAQ0RHmnPtqPtVAWsWGWG/s3bHDaS2b8xjCc2IDbwJAo+2Vr4XGRPSEug9VR
oinEmG8PwpYI0y/yXotMfxKOHTFwGGcGCFmVj0+SuFzfCxW660sPQdXTGIuWr+x2
6nHWfp2AzNpQYDj55frUhCaQ6l1hZj9zl+BRTlStp7aVh3TxiAhWzba9l2rP3qte
seLT33xmx97l2CVVl8Z4kkftuS6Ns6dmMh+7sZiA8CVbyR2bYuIzJPpdxagE1IVe
9KJ7vQgZkvRGOrYtf0gzNR8hpXrBt7dPMTYTYNtGy7TF4P+dhESufFLfA3d6EarZ
MgI1uG3hP6TpCDezX90zW2ttrU/eTwK22SFkeG8D/DT01zfIJskNIHBu+25BxVki</ds:SignatureValue>
<ds:KeyInfo><ds:KeyName>ip-172-31-28-64.us-west-2.compute.internal</ds:KeyName><ds:X509Data><ds:X509SubjectName>CN=ip-172-31-28-64.us-west-2.compute.internal</ds:X509SubjectName><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKmtzjCD1+tqMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNV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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-02-18 08:53:53 DEBUG OpenSAML.MessageEncoder.SAML2POST [41] [default]: message encoded, sending HTML form template to client
2019-02-18 08:53:57 DEBUG Shibboleth.Listener [41] [default]: dispatching message (default/SAML2/POST)
2019-02-18 08:53:57 DEBUG OpenSAML.MessageDecoder.SAML2POST [41] [default]: validating input
2019-02-18 08:53:57 DEBUG OpenSAML.MessageDecoder.SAML2POST [41] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_e5380ec02f2acfe6343a666f972ee69a" InResponseTo="_b7431fe74a4a7c5b91c363628f14ab00" IssueInstant="2019-02-18T08:53:39Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">92701793-A31C-449C-BFC8-0BD05BEB1BA9</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_e5380ec02f2acfe6343a666f972ee69a"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>C+2ymE5Ys80wbqbNztaTyvj4n8E=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>IRGY8fPtnGmULk43YHcH9tk6JZdNR4HJG6sfC7wo1MGXBREotlpYeLveo3zjcS5aMecXAevrDz2P
CZ020CswMkfM+0Us5KJdQZMnhcxu9rrix+l3F9+HBuEBX4hxg69tajjsb6YiffcDDkudmnl+CUnw
JNeyV7t5+tBZHQO33ip8986mCXcXi6v3o7BirkKNGFRNvUOMudIUS+b8pyZVtoBwUEWxtS+P9Pa0
Mw/lOntbNuvP0FL0WANIcW3Fe7Vs6IwwWzX47kDFwnTiJx42kJDXEDz5Sbo7Pjdmzbg8lTgLOIBo
2ahyGp7YcjgolYmpMB04rVf4itSzELoXKNKAZQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDYDCCAkigAwIBAgIBFjANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJTRTEVMBMGA1UEBxMM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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_c33907a742bf8074064540ce7dca86ee" IssueInstant="2019-02-18T08:53:39Z" Version="2.0"><saml2:Issuer>92701793-A31C-449C-BFC8-0BD05BEB1BA9</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">mans@kruthuset.org</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_b7431fe74a4a7c5b91c363628f14ab00" NotOnOrAfter="2019-02-18T08:55:39Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-02-18T08:53:39Z" NotOnOrAfter="2019-02-18T08:55:39Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-02-18T08:53:39Z" SessionIndex="b3d5c051-bd6d-4893-b914-187bbcce9ef8"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:XMLDSig</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2019-02-18 08:53:57 DEBUG OpenSAML.MessageDecoder.SAML2 [41] [default]: extracting issuer from SAML 2.0 protocol message
2019-02-18 08:53:57 DEBUG OpenSAML.MessageDecoder.SAML2 [41] [default]: message from (92701793-A31C-449C-BFC8-0BD05BEB1BA9)
2019-02-18 08:53:57 DEBUG OpenSAML.MessageDecoder.SAML2 [41] [default]: searching metadata for message issuer...
2019-02-18 08:53:57 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [41] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 08:53:57 DEBUG XMLTooling.StorageService [41] [default]: inserted record (_e5380ec02f2acfe6343a666f972ee69a) in context (MessageFlow) with expiration (1550480259)
2019-02-18 08:53:57 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [41] [default]: validating signature profile
2019-02-18 08:53:57 DEBUG XMLTooling.KeyInfoResolver.Inline [41] [default]: resolving ds:X509Certificate
2019-02-18 08:53:57 DEBUG XMLTooling.KeyInfoResolver.Inline [41] [default]: resolved 1 certificate(s)
2019-02-18 08:53:57 DEBUG XMLTooling.KeyInfoResolver.Inline [41] [default]: resolved 0 CRL(s)
2019-02-18 08:53:57 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [41] [default]: signature verified against message issuer
2019-02-18 08:53:57 DEBUG Shibboleth.SSO.SAML2 [41] [default]: processing message against SAML 2.0 SSO profile
2019-02-18 08:53:57 DEBUG Shibboleth.SSO.SAML2 [41] [default]: extracting issuer from SAML 2.0 assertion
2019-02-18 08:53:57 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [41] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 08:53:57 DEBUG XMLTooling.StorageService [41] [default]: inserted record (_c33907a742bf8074064540ce7dca86ee) in context (MessageFlow) with expiration (1550480259)
2019-02-18 08:53:57 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [41] [default]: assertion satisfied bearer confirmation requirements
2019-02-18 08:53:57 DEBUG Shibboleth.SSO.SAML2 [41] [default]: SSO profile processing completed successfully
2019-02-18 08:53:57 DEBUG Shibboleth.SSO.SAML2 [41] [default]: extracting pushed attributes...
2019-02-18 08:53:57 DEBUG Shibboleth.AttributeExtractor.XML [41] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-02-18 08:53:57 DEBUG Shibboleth.AttributeExtractor.XML [41] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2019-02-18 08:53:57 DEBUG Shibboleth.AttributeExtractor.XML [41] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-02-18 08:53:57 DEBUG Shibboleth.SessionCache [41] [default]: creating new session
2019-02-18 08:53:57 DEBUG Shibboleth.SessionCache [41] [default]: storing new session...
2019-02-18 08:53:57 DEBUG XMLTooling.StorageService [41] [default]: inserted record (session) in context (_47c2a608404e9d604ba8a2271f3fd727) with expiration (1550483637)
2019-02-18 08:53:57 DEBUG XMLTooling.StorageService [41] [default]: inserted record (mans@kruthuset.org) in context (NameID) with expiration (1550508837)
2019-02-18 08:53:57 INFO Shibboleth.SessionCache [41] [default]: new session created: ID (_47c2a608404e9d604ba8a2271f3fd727) IdP (92701793-A31C-449C-BFC8-0BD05BEB1BA9) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.0.68)
2019-02-18 08:53:57 DEBUG XMLTooling.StorageService [41] [default]: deleted record (e98a01a85525dd938c5648afc599866a94ca90c2fbf986f7f7a5c5686f89630b) in context (RelayState)
2019-02-18 08:53:57 DEBUG Shibboleth.SSO.SAML2 [41] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-02-18 08:53:57 DEBUG Shibboleth.Listener [41]: dispatching message (default::getHeaders::Application)
2019-02-18 08:53:57 DEBUG Shibboleth.Listener [41] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 08:53:57 DEBUG XMLTooling.StorageService [41] [default]: updated expiration of valid records in context (_47c2a608404e9d604ba8a2271f3fd727) to (1550483637)
2019-02-18 08:53:58 DEBUG Shibboleth.Listener [41] [default]: dispatching message (touch::StorageService::SessionCache)
2019-02-18 08:53:58 DEBUG XMLTooling.StorageService [41] [default]: updated expiration of valid records in context (_47c2a608404e9d604ba8a2271f3fd727) to (1550483638)
2019-02-18 08:56:24 DEBUG Shibboleth.Listener [42] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 08:56:24 DEBUG Shibboleth.Listener [42] [default]: dispatching message (default/Logout::run::SAML2LI)
2019-02-18 08:56:24 DEBUG Shibboleth.SessionCache [42] [default]: searching for session (_12d1153235fe30ac43219bda8094346d)
2019-02-18 08:56:24 DEBUG Shibboleth.SessionCache [42] [default]: reconstituting session and checking validity
2019-02-18 08:56:24 DEBUG XMLTooling.KeyInfoResolver.Inline [42] [default]: resolving ds:X509Certificate
2019-02-18 08:56:24 DEBUG XMLTooling.KeyInfoResolver.Inline [42] [default]: resolved 1 certificate(s)
2019-02-18 08:56:24 DEBUG XMLTooling.KeyInfoResolver.Inline [42] [default]: resolved 0 CRL(s)
2019-02-18 08:56:24 DEBUG XMLTooling.KeyInfoResolver.Inline [42] [default]: resolving ds:X509Certificate
2019-02-18 08:56:24 DEBUG XMLTooling.KeyInfoResolver.Inline [42] [default]: resolved 1 certificate(s)
2019-02-18 08:56:24 DEBUG XMLTooling.KeyInfoResolver.Inline [42] [default]: resolved 0 CRL(s)
2019-02-18 08:56:24 DEBUG OpenSAML.MessageEncoder.SAML2POST [42] [default]: validating input
2019-02-18 08:56:24 DEBUG OpenSAML.MessageEncoder.SAML2POST [42] [default]: signing and marshalling the message
2019-02-18 08:56:24 DEBUG OpenSAML.MessageEncoder.SAML2POST [42] [default]: marshalled message:
<samlp:LogoutRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://cas.example.org/ssoserver/profile/SAML2/POST/SLO" ID="_26ddde72790c77a15f6b045524b7f508" IssueInstant="2019-02-18T08:56:24Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_26ddde72790c77a15f6b045524b7f508">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>0lXHL21znTeCKpaH9Tygmy9GfYAlGYG2JpFNofWAG88=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>XUPdXZWgMPVZ+rbMuh57CZ18wYjoMHySXis75OtZ7OXVk2Hxt9/zRVLYiqgR+DC/
+iH2qd8ODCpvpOODxFEJTUWWeUWXDUeUD65ipAiFMKBRSGKIE42OkC2gKF4utxQC
rpx/3LjsccZXvMzPzWlr1Z2O45T8kl8i1MsgrBwGkQhNkeglZNP7lPxFudC9NlUN
a3VrvOUS+9kP1yp5IEDZz1F/Aa3iDyvQ8c/3Dfd/lIQ62IMeuESmZJPYiH8SSjrt
emDvzSXxRTz3ChYVixGBLYkBd+H0dJueNt0m1RrnaDQi5o/fdBLm0S+vlw+tnxYk
NqyAujf61QrKkbjI4rfPqx5Zf+sWQ/rc8yLh/nKLf99WyW0laq7wF2cIcCdE1sz8
AnN59HcdHbhbqYG/I8skOGqfka3BxjtV+tIcmWst6gyWOKxvl1cjSMtyXG6eU13I
sPF9ooE/VarBDgVDfk35KF14i8670g249XHJa95qDmGVhUXmxXVIGvETdj1GZfqT</ds:SignatureValue>
<ds:KeyInfo><ds:KeyName>ip-172-31-28-64.us-west-2.compute.internal</ds:KeyName><ds:X509Data><ds:X509SubjectName>CN=ip-172-31-28-64.us-west-2.compute.internal</ds:X509SubjectName><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKmtzjCD1+tqMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNV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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Extensions><aslo:Asynchronous xmlns:aslo="urn:oasis:names:tc:SAML:2.0:protocol:ext:async-slo"/></samlp:Extensions><saml:EncryptedID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>MIIDHjCCAgagAwIBAgIVANXFpca+EQBuAaaB2YF4a/5Q+ajtMA0GCSqGSIb3DQEB
CwUAMBoxGDAWBgNVBAMMD2Nhcy5leGFtcGxlLm9yZzAeFw0xOTAxMTYwMzA1NTNa
Fw0zOTAxMTYwMzA1NTNaMBoxGDAWBgNVBAMMD2Nhcy5leGFtcGxlLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIyKTf2NOX/4aQ5nq5kdDpUYaWCE
PaajIff6XgNny6uciSNKJRyak+byEtVCIGZWVbr4gr8QheFwLPNEzWM7P4XBESF7
y0Al22/N2i/v6DFRYph5d7PPq1U4k5UYC/hTOVPYaKRIkvTA+ThWuyU19FUUF9wP
Mb+X0P8xUWtDcndkoTFG+ZlldTU7/96PHRQ43zhfI2TdETZB2zkoI+fZpzMyZMyy
YPIVdNWLHEqZc+P4ZQ4LgnuQABdiBrIR1kVHQlJFojTYtxz5TtInOp5ZESKsmuoq
U5wfX8nxwDV1oh0m1Nkw7apbd7rBchD4KFohsWiDb1smimMleWWolM71z00CAwEA
AaNbMFkwHQYDVR0OBBYEFHkU5KWtaqycc1SFWMsCsYK9TtCRMDgGA1UdEQQxMC+C
D2Nhcy5leGFtcGxlLm9yZ4YcY2FzLmV4YW1wbGUub3JnL2lkcC9tZXRhZGF0YTAN
BgkqhkiG9w0BAQsFAAOCAQEAVI2sEtWM+3nKH8NJxCaNSIAfgGKzQnlQofC5UVrB
8+muEZg5twDpPpNB1OngS1zWPS4a/jq0grqvvJHP4CfVcbQOzYNPhpe7rCtvGHCD
rmHskWY4KvOdvLn3z4ZwudageQznGgaTSYxT1Ffl5BRLuB0qD2KKKKRnf984iWHD
W+2Azyy6ZjcKcD1dZixachlTEnkOR/nSGAzGzfDaClXAE5p9yK//TFLZQX1TBHH4
51uNoT45MeeLYsJdpzpe3nVtvS1YlgltMW8PtjYnSOSiO1nZBJXc2aMgAZ9r2tmy
sAoD0GxTrcm4ewF2+AFyUA52n4wEYRmztmWYhZzCRNHyLQ==</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>P7oPXkUmguQ91hkTEgzNhSrOZPCm6BctsCyb04NSwQye1IZu/SYvmIYj75pnue8ZVKDccfyvVJ7Q
rxqdT0Bw7Qnx0B8lt4ltxZbBKvKUD/t8WJVg0LlyLV2NxQnMCy+2kgpdf1VuIRCRwmzBFprMB/6S
tEqc9NvHbGwJRk2PL6IAjxPLyq8FjpNlR+egXL7TR69G2V2+d6R3Z7Pe9Kskh/89PPiT5NHaZyCU
et7SMyNYGTOqGnaQlhdmQeVZv3Pz7/fEpbuFdo6q8U2Z8dT7LAFHFb0VrGBtmHAoRaP8Jb1yUc8+
64owe81aiGp7+esYmLNWeNLWTGNPtR8pZfmkCg==</xenc:CipherValue>
</xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>evChKLZnQmpAVjiWFQ4/q/ItFpYqoDJK6jSqLqg30DpJ4riyEDOQlD6napHMtKhK6/yfdgU4NAtr
qEn36lKtPEByM47IWLHZ8WpOOsTJZZCOKf9zstlGQJkGz2RnnNkd7BaUVOlZQOD9LFutuJiSYC+2
KMqK13tTUnEmSHySBpJohdACtCF9py3ljybjsXjmJ9FUrJOdh5ougQcU/kOCuPSLp4Lx0UxKxYn6
z+LnOP0AQboXl0zuEWVCOfRZNU7XbxoEca02nczRo81dLVvwhPpZp6v0ijIVkhNtsKb/sVwL8qi8
v2SSM4OPoIIkNyB4qbEoBHWqiOI5XAT8EkdJdFObnSLGpJEl3XP/RIgWZSGBd1E62xo1IWOaV9LI
03NR</xenc:CipherValue>
</xenc:CipherData></xenc:EncryptedData></saml:EncryptedID><samlp:SessionIndex>_935722003415209067</samlp:SessionIndex></samlp:LogoutRequest>
2019-02-18 08:56:24 DEBUG OpenSAML.MessageEncoder.SAML2POST [42] [default]: message encoded, sending HTML form template to client
2019-02-18 08:56:24 INFO Shibboleth.SessionCache [42] [default]: removed session (_12d1153235fe30ac43219bda8094346d)
2019-02-18 08:56:51 DEBUG Shibboleth.Listener [43] [default]: dispatching message (default/Login::run::SAML2SI)
2019-02-18 08:56:51 DEBUG XMLTooling.StorageService [43] [default]: inserted record (9034bdc101580273128da5b0f5ac31c656c06285e34461a6dbbdf478924d10a3) in context (RelayState) with expiration (1550480811)
2019-02-18 08:56:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [43] [default]: validating input
2019-02-18 08:56:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [43] [default]: marshalling, deflating, base64-encoding the message
2019-02-18 08:56:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [43] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://cas.example.org/ssoserver/profile/SAML2/Redirect/SSO" ID="_80af64debcc039f2e23c568d7a95a690" IssueInstant="2019-02-18T08:56:51Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-02-18 08:56:51 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [43] [default]: message encoded, sending redirect to client
2019-02-18 08:57:02 INFO Shibboleth.Listener [43]: detected socket closure, shutting down worker thread
2019-02-18 08:57:06 DEBUG Shibboleth.Listener [44] [default]: dispatching message (default/SAML2/POST)
2019-02-18 08:57:06 DEBUG OpenSAML.MessageDecoder.SAML2POST [44] [default]: validating input
2019-02-18 08:57:06 DEBUG OpenSAML.MessageDecoder.SAML2POST [44] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_6104297214409393437" InResponseTo="_80af64debcc039f2e23c568d7a95a690" IssueInstant="2019-02-18T08:57:05.890Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://cas.example.org/ssoserver</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_6104297214409393437">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>DPGkq7VbtVxkVjVJ23E98tKpDjxraKmSjGuWQAfwKUeVGyKquBMT999JXyPdU8uqr52r2wdTBP/O
H7bNrttYtw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
mR1HJgKR07QQeWuRhIJGxQEgmB6PCrdFZTZLnj5DHUPMDof5GcJk+eGYrCmK3y3oc/MOFBN5htNR
kNQQa/RtlzcahGu+vYVWbyrkIraow550st6DMlumPEF2E8EN5DlGymcsCTBdXow/uRwIdai77yY0
TnxHEpd2Gx1jJENPJ67Gthf/L0UWyGtvbJECPQi6Q+2ZL3zp9kP4fEE3eaeZDi5KXgbcN8bPWx4o
vXh8DJiu9j7e6NCal33izQW0sTQrEClmffzbSz72xHGOqo95ISXD1+DHm+snAYITnP+sbYuVHSeE
P8jo7a9W9nS40NVzBPAa3s4orjhMQwp1UQxT3A==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDHTCCAgWgAwIBAgIUNsClbOBPdlurplA1uPYm/WMgv+swDQYJKoZIhvcNAQELBQAwGjEYMBYG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_1339901790201351408" IssueInstant="2019-02-18T08:57:05.876Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer>https://cas.example.org/ssoserver</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_1339901790201351408">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>88QX9IS51p7gmwHJFZAAKkJNCMpYXyLyPW+2M++MT5qP1iuOrpwABSy4Qw6XVoTyyu2MK8TLwBbI
n8DlOZ1NqQ==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
KZ0N703kjtHmdpte6B/BCt3S35Qm8RswbCyZnKMIsjM8TSwayNpb41Dw0cySV5Skncis5HCY5YJC
XQ4eSIbAea9TtNGfvSiPqLYkhtQSI0YPmjSqJhE3nyXFDapO73KPyzIoVYSrQvg8asTnWObVrzE8
bBYzkjw6n5Qj4bf9utm0kY4vhbO6b+uvZ0OBRMR8tblqEaRTHBBfTfyUN5svQK+QdArAlD6VlHSS
R/l0UJG/KmuiWFGITjXt8kY/evkYuPqmfdVLw3NaCV4KluiSbcmZSzCn55dqrNQBYzV+Gallm3vn
F9KlCbR2CcPSkRrjK7HyRBG+ND9U1c9RSKPMtQ==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDHTCCAgWgAwIBAgIUNsClbOBPdlurplA1uPYm/WMgv+swDQYJKoZIhvcNAQELBQAwGjEYMBYG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://samltest.id/saml/sp" SPNameQualifier="https://samltest.id/saml/sp">/YGI1R3W50kQU6wfh+gt/9PDyyY=</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_80af64debcc039f2e23c568d7a95a690" NotOnOrAfter="2019-02-18T09:47:05.876Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-02-18T08:57:05.878Z" NotOnOrAfter="2019-02-18T09:47:05.878Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-02-18T08:57:04.870Z" SessionIndex="_2565117589092266050" SessionNotOnOrAfter="2019-02-18T09:47:04.870Z"><saml2:SubjectLocality Address="54.69.101.82"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="uid" Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>lihn</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="role" Name="role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>user</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="passwd" Name="passwd" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>111111</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="sex" Name="sex" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="roles" Name="roles" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>juse1</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="name" Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>李海宁</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="groups" Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>test</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="company" Name="company" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="tel" Name="tel" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="position" Name="position" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="email" Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>lihn@sohu.com</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-02-18 08:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [44] [default]: extracting issuer from SAML 2.0 protocol message
2019-02-18 08:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [44] [default]: message from (https://cas.example.org/ssoserver)
2019-02-18 08:57:06 DEBUG OpenSAML.MessageDecoder.SAML2 [44] [default]: searching metadata for message issuer...
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [44] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: inserted record (_6104297214409393437) in context (MessageFlow) with expiration (1550480465)
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [44] [default]: validating signature profile
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [44] [default]: signature verified against message issuer
2019-02-18 08:57:06 DEBUG Shibboleth.SSO.SAML2 [44] [default]: processing message against SAML 2.0 SSO profile
2019-02-18 08:57:06 DEBUG Shibboleth.SSO.SAML2 [44] [default]: extracting issuer from SAML 2.0 assertion
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [44] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: inserted record (_1339901790201351408) in context (MessageFlow) with expiration (1550480465)
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [44] [default]: validating signature profile
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [44] [default]: signature verified against message issuer
2019-02-18 08:57:06 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [44] [default]: assertion satisfied bearer confirmation requirements
2019-02-18 08:57:06 DEBUG Shibboleth.SSO.SAML2 [44] [default]: SSO profile processing completed successfully
2019-02-18 08:57:06 DEBUG Shibboleth.SSO.SAML2 [44] [default]: extracting pushed attributes...
2019-02-18 08:57:06 DEBUG Shibboleth.AttributeExtractor.XML [44] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-02-18 08:57:06 DEBUG Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-02-18 08:57:06 DEBUG Shibboleth.AttributeExtractor.XML [44] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: uid, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: passwd, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: sex, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: roles, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: name, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: groups, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: company, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: tel, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: position, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 INFO Shibboleth.AttributeExtractor.XML [44] [default]: skipping unmapped SAML 2.0 Attribute with Name: email, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 08:57:06 DEBUG Shibboleth.SessionCache [44] [default]: creating new session
2019-02-18 08:57:06 DEBUG Shibboleth.SessionCache [44] [default]: storing new session...
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: inserted record (session) in context (_5737c58b56cf0b5e8d70425338b74c55) with expiration (1550483826)
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: updated record (/YGI1R3W50kQU6wfh+gt/9PDyyY=) in context (NameID) with expiration (1550483404)
2019-02-18 08:57:06 INFO Shibboleth.SessionCache [44] [default]: new session created: ID (_5737c58b56cf0b5e8d70425338b74c55) IdP (https://cas.example.org/ssoserver) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.0.68)
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: deleted record (9034bdc101580273128da5b0f5ac31c656c06285e34461a6dbbdf478924d10a3) in context (RelayState)
2019-02-18 08:57:06 DEBUG Shibboleth.SSO.SAML2 [44] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-02-18 08:57:06 DEBUG Shibboleth.Listener [44]: dispatching message (default::getHeaders::Application)
2019-02-18 08:57:06 DEBUG Shibboleth.Listener [44] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: updated expiration of valid records in context (_5737c58b56cf0b5e8d70425338b74c55) to (1550483826)
2019-02-18 08:57:06 DEBUG Shibboleth.Listener [44] [default]: dispatching message (touch::StorageService::SessionCache)
2019-02-18 08:57:06 DEBUG XMLTooling.StorageService [44] [default]: updated expiration of valid records in context (_5737c58b56cf0b5e8d70425338b74c55) to (1550483826)
2019-02-18 08:57:14 INFO Shibboleth.Listener [38]: detected socket closure, shutting down worker thread
2019-02-18 08:57:41 INFO XMLTooling.StorageService : purged 8 expired record(s) from storage
2019-02-18 09:01:14 INFO Shibboleth.Listener [36]: detected socket closure, shutting down worker thread
2019-02-18 09:04:56 INFO Shibboleth.Listener [44]: detected socket closure, shutting down worker thread
2019-02-18 09:04:57 INFO Shibboleth.Listener [40]: detected socket closure, shutting down worker thread
2019-02-18 09:07:14 DEBUG Shibboleth.Listener [45] [default]: dispatching message (default/Login::run::SAML2SI)
2019-02-18 09:07:14 DEBUG XMLTooling.StorageService [45] [default]: inserted record (67a05df80b9df1ff37719b319bb1153e0d249d7016aed7ea931217c4da75dd65) in context (RelayState) with expiration (1550481434)
2019-02-18 09:07:14 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: validating input
2019-02-18 09:07:14 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: signing and marshalling the message
2019-02-18 09:07:14 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://phenixid.local:8443/saml/authenticate/login" ID="_dd9a4d615413b9f819b52dbd2b9c92f2" IssueInstant="2019-02-18T09:07:14Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_dd9a4d615413b9f819b52dbd2b9c92f2">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>X+2oGiKqLfG9bCeole1LzZMhPfKqLYVrsgbr5txHrYU=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>dWqlfvLtzNjZIawHejgYjkHSr2r+af31DBaPObME268GA9zraYF46woVgiTC2Gby
jfz3EE7WLPa011JLUEYcpE3bJzlYkBry9tiYLCIpieMluOHm0ZJKM4KUBPPjdXLh
B48dMLngr9pui9f63QDwejdZGxMTo3ySIQitqMrJcO8AsmJFsVSUhPxcwAmtNl14
grIAUVRxujPvd4ZaP9pTR3EWH4gNIkiX04qRFtuVTEtM3TZAXD23mjijMxpQXjj1
tyOrIq/+qCjHAvtzKCcrfF56l/jc52BJ04tkIEHjMnAIc3tthXT0kHNK6gILJ/H6
BoEGZYye39eYGsmQPVS3XFZDD+LP/rAattLidDohYqhVXk57kDXzIqJ/wR8hNJhQ
mp//p0RW5rFOLDmRdz6pCJVsqLjLPjmGPfskb0Slu7YNAcaIen71YmY/Oj/xPeFJ
YGjXEcxEs6dpX85lW+TDqP3T/HZ3IELBMv2hyDvofUK+LBqNy0+NZm5jDDXv4H5D</ds:SignatureValue>
<ds:KeyInfo><ds:KeyName>ip-172-31-28-64.us-west-2.compute.internal</ds:KeyName><ds:X509Data><ds:X509SubjectName>CN=ip-172-31-28-64.us-west-2.compute.internal</ds:X509SubjectName><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKmtzjCD1+tqMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNV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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-02-18 09:07:14 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: message encoded, sending HTML form template to client
2019-02-18 09:07:37 DEBUG Shibboleth.Listener [46] [default]: dispatching message (default/SAML2/POST)
2019-02-18 09:07:37 DEBUG OpenSAML.MessageDecoder.SAML2POST [46] [default]: validating input
2019-02-18 09:07:37 DEBUG OpenSAML.MessageDecoder.SAML2POST [46] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_397d83d7b46ab432780f13b07c4658ca" InResponseTo="_dd9a4d615413b9f819b52dbd2b9c92f2" IssueInstant="2019-02-18T09:07:34Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://phenixid.local</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_397d83d7b46ab432780f13b07c4658ca"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>MXaztP9aPBDsQJidvqk8oe5n8lI=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>LEM4H35pAlAOJ/AYEqikYyczeiXinu7KyBns36VS0MOFrYbmc4blwaILKHlk0cgofCtnuYGWKskN
F+Th5rJuXCDtLDcaIvVF3L3rVL22xQ5INkt31ku44Ehe3MYJZ1LUjM/x3JZzPLTytNv8g0Gx40zH
8vl6RqVuCpoIhml7EoKdMtrbitDY2u07ch8DA8pvaOfb8CHpGWPz9V2T/+7pxO8JJZuyBDvkmum2
pJaJ0d/uwp0vtvMcZMuU7DdBWRo4BYMBbzj3XhItt61B3h3GQYCgfobsBQin+SaoratoNKCnv6ZR
xSOsuuTZAVx+toM8HtKND/By+NQzS8asDcCCdw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICrjCCAZagAwIBAgIEW+lMXDANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDDA5waGVuaXhpZC5s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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_0af36f72072f83649700e8e07f195118" IssueInstant="2019-02-18T09:07:34Z" Version="2.0"><saml2:Issuer>https://phenixid.local</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">lars.forsgren@phenixid.se</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_dd9a4d615413b9f819b52dbd2b9c92f2" NotOnOrAfter="2019-02-18T09:09:34Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-02-18T09:07:34Z" NotOnOrAfter="2019-02-18T09:09:34Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-02-18T09:07:34Z" SessionIndex="3097f218-c2ca-4d19-887b-96e494c6598b"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:XMLDSig</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2019-02-18 09:07:37 DEBUG OpenSAML.MessageDecoder.SAML2 [46] [default]: extracting issuer from SAML 2.0 protocol message
2019-02-18 09:07:37 DEBUG OpenSAML.MessageDecoder.SAML2 [46] [default]: message from (https://phenixid.local)
2019-02-18 09:07:37 DEBUG OpenSAML.MessageDecoder.SAML2 [46] [default]: searching metadata for message issuer...
2019-02-18 09:07:37 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [46] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 09:07:37 DEBUG XMLTooling.StorageService [46] [default]: inserted record (_397d83d7b46ab432780f13b07c4658ca) in context (MessageFlow) with expiration (1550481094)
2019-02-18 09:07:37 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [46] [default]: validating signature profile
2019-02-18 09:07:37 DEBUG XMLTooling.KeyInfoResolver.Inline [46] [default]: resolving ds:X509Certificate
2019-02-18 09:07:37 DEBUG XMLTooling.KeyInfoResolver.Inline [46] [default]: resolved 1 certificate(s)
2019-02-18 09:07:37 DEBUG XMLTooling.KeyInfoResolver.Inline [46] [default]: resolved 0 CRL(s)
2019-02-18 09:07:37 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [46] [default]: signature verified against message issuer
2019-02-18 09:07:37 DEBUG Shibboleth.SSO.SAML2 [46] [default]: processing message against SAML 2.0 SSO profile
2019-02-18 09:07:37 DEBUG Shibboleth.SSO.SAML2 [46] [default]: extracting issuer from SAML 2.0 assertion
2019-02-18 09:07:37 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [46] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 09:07:37 DEBUG XMLTooling.StorageService [46] [default]: inserted record (_0af36f72072f83649700e8e07f195118) in context (MessageFlow) with expiration (1550481094)
2019-02-18 09:07:37 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [46] [default]: assertion satisfied bearer confirmation requirements
2019-02-18 09:07:37 DEBUG Shibboleth.SSO.SAML2 [46] [default]: SSO profile processing completed successfully
2019-02-18 09:07:37 DEBUG Shibboleth.SSO.SAML2 [46] [default]: extracting pushed attributes...
2019-02-18 09:07:37 DEBUG Shibboleth.AttributeExtractor.XML [46] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-02-18 09:07:37 DEBUG Shibboleth.AttributeExtractor.XML [46] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2019-02-18 09:07:37 DEBUG Shibboleth.AttributeExtractor.XML [46] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-02-18 09:07:37 DEBUG Shibboleth.SessionCache [46] [default]: creating new session
2019-02-18 09:07:37 DEBUG Shibboleth.SessionCache [46] [default]: storing new session...
2019-02-18 09:07:37 DEBUG XMLTooling.StorageService [46] [default]: inserted record (session) in context (_b31ebababafc032178d77060455768bb) with expiration (1550484457)
2019-02-18 09:07:37 DEBUG XMLTooling.StorageService [46] [default]: inserted record (lars.forsgren@phenixid.se) in context (NameID) with expiration (1550509657)
2019-02-18 09:07:37 INFO Shibboleth.SessionCache [46] [default]: new session created: ID (_b31ebababafc032178d77060455768bb) IdP (https://phenixid.local) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.33.243)
2019-02-18 09:07:37 DEBUG XMLTooling.StorageService [46] [default]: deleted record (67a05df80b9df1ff37719b319bb1153e0d249d7016aed7ea931217c4da75dd65) in context (RelayState)
2019-02-18 09:07:37 DEBUG Shibboleth.SSO.SAML2 [46] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-02-18 09:07:37 DEBUG Shibboleth.Listener [46]: dispatching message (default::getHeaders::Application)
2019-02-18 09:07:37 DEBUG Shibboleth.Listener [46] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 09:07:37 DEBUG XMLTooling.StorageService [46] [default]: updated expiration of valid records in context (_b31ebababafc032178d77060455768bb) to (1550484457)
2019-02-18 09:07:38 DEBUG Shibboleth.Listener [46] [default]: dispatching message (touch::StorageService::SessionCache)
2019-02-18 09:07:38 DEBUG XMLTooling.StorageService [46] [default]: updated expiration of valid records in context (_b31ebababafc032178d77060455768bb) to (1550484458)
2019-02-18 09:08:08 INFO Shibboleth.Listener [41]: detected socket closure, shutting down worker thread
2019-02-18 09:12:02 DEBUG Shibboleth.Listener [46] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 09:12:02 DEBUG Shibboleth.Listener [46] [default]: dispatching message (default/Logout::run::SAML2LI)
2019-02-18 09:12:02 DEBUG Shibboleth.SessionCache [46] [default]: searching for session (_5737c58b56cf0b5e8d70425338b74c55)
2019-02-18 09:12:02 DEBUG Shibboleth.SessionCache [46] [default]: reconstituting session and checking validity
2019-02-18 09:12:02 DEBUG OpenSAML.MessageEncoder.SAML2POST [46] [default]: validating input
2019-02-18 09:12:02 DEBUG OpenSAML.MessageEncoder.SAML2POST [46] [default]: signing and marshalling the message
2019-02-18 09:12:02 DEBUG OpenSAML.MessageEncoder.SAML2POST [46] [default]: marshalled message:
<samlp:LogoutRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://cas.example.org/ssoserver/profile/SAML2/POST/SLO" ID="_a8769a81dcadc6a86ff5e74c3674964b" IssueInstant="2019-02-18T09:12:02Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_a8769a81dcadc6a86ff5e74c3674964b">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>a02UPyt+kXx4C4V4nOogNx4+fKY5JKtD1VaOz3hzhI0=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>LZ1iBdYUg3jNWGfkWFwQZMmqncuqHh1AdeQ08NMbaSbc9Rqrh6Wx06WRYSkGOrlY
7whX48bQLYyj2XAMp+kB/6k0xzF41Y0Tiynf00FHA2WGft3UEiUHW5jAVjer+mSN
rF5r0sAW0Cfud2wbvxt6MvsWc+rcIuDovpRu6HqZALw/UUzaPnT0SPVmNVrPZYbe
VTp7tKKqdGJnrujerpa+gXTOVjIHcJ21BlMFBY+rn9p3DGJvMWP9dEm5UYo8mcVm
eDpEdYvSqUEre5hlL9oRtcz6PtpVdkcLwxMmz/PbSXD7kNk8qz37f/jBQcTxdk0Y
RneEFLGXhr7tEpJcNDW2wkiFV8rvb2PP83fS1+/rREC2IKTVpDefNHUteP6y06rX
zTmUM13Q+ZWIREM6dyhg+DP9mWYrYg4b64esjgluC4FY/wb6ImHV/Ct6b2wWClBL
EBqnhq95Dn0FpaIGw9uPMGjeT3XOzhGp8G75cTayiamYJRhj/h0adHqrba9E/UEN</ds:SignatureValue>
<ds:KeyInfo><ds:KeyName>ip-172-31-28-64.us-west-2.compute.internal</ds:KeyName><ds:X509Data><ds:X509SubjectName>CN=ip-172-31-28-64.us-west-2.compute.internal</ds:X509SubjectName><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKmtzjCD1+tqMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNV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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Extensions><aslo:Asynchronous xmlns:aslo="urn:oasis:names:tc:SAML:2.0:protocol:ext:async-slo"/></samlp:Extensions><saml:EncryptedID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>MIIDHjCCAgagAwIBAgIVANXFpca+EQBuAaaB2YF4a/5Q+ajtMA0GCSqGSIb3DQEB
CwUAMBoxGDAWBgNVBAMMD2Nhcy5leGFtcGxlLm9yZzAeFw0xOTAxMTYwMzA1NTNa
Fw0zOTAxMTYwMzA1NTNaMBoxGDAWBgNVBAMMD2Nhcy5leGFtcGxlLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIyKTf2NOX/4aQ5nq5kdDpUYaWCE
PaajIff6XgNny6uciSNKJRyak+byEtVCIGZWVbr4gr8QheFwLPNEzWM7P4XBESF7
y0Al22/N2i/v6DFRYph5d7PPq1U4k5UYC/hTOVPYaKRIkvTA+ThWuyU19FUUF9wP
Mb+X0P8xUWtDcndkoTFG+ZlldTU7/96PHRQ43zhfI2TdETZB2zkoI+fZpzMyZMyy
YPIVdNWLHEqZc+P4ZQ4LgnuQABdiBrIR1kVHQlJFojTYtxz5TtInOp5ZESKsmuoq
U5wfX8nxwDV1oh0m1Nkw7apbd7rBchD4KFohsWiDb1smimMleWWolM71z00CAwEA
AaNbMFkwHQYDVR0OBBYEFHkU5KWtaqycc1SFWMsCsYK9TtCRMDgGA1UdEQQxMC+C
D2Nhcy5leGFtcGxlLm9yZ4YcY2FzLmV4YW1wbGUub3JnL2lkcC9tZXRhZGF0YTAN
BgkqhkiG9w0BAQsFAAOCAQEAVI2sEtWM+3nKH8NJxCaNSIAfgGKzQnlQofC5UVrB
8+muEZg5twDpPpNB1OngS1zWPS4a/jq0grqvvJHP4CfVcbQOzYNPhpe7rCtvGHCD
rmHskWY4KvOdvLn3z4ZwudageQznGgaTSYxT1Ffl5BRLuB0qD2KKKKRnf984iWHD
W+2Azyy6ZjcKcD1dZixachlTEnkOR/nSGAzGzfDaClXAE5p9yK//TFLZQX1TBHH4
51uNoT45MeeLYsJdpzpe3nVtvS1YlgltMW8PtjYnSOSiO1nZBJXc2aMgAZ9r2tmy
sAoD0GxTrcm4ewF2+AFyUA52n4wEYRmztmWYhZzCRNHyLQ==</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>BFhYrF9YOqyu125cMIcknfbrxB4psRVpA/HURGRlUi1OMm1V0DhQ3icUwDqQSkZamVRpBf2qmxlH
+Aqr9QualGLB/mCL3mUcsmgI3PfAUYx/+SudaDU811qm8V9jMt5koYJi09Sb4Brx5fsRpO7M94RL
ZFF2ZgAkB+6mtaX+sV9h0yYa4/aiXAL7w+5KHA1Kc/zcChPTqZjuLqqRhDTRdrEpS4WWlUxP2jOC
kXxzkJDoLaE43QIcnPUB4vkytZTE+QoqcM84OkvqNnhnDifhoBgXAZEfifNsGDDgApU2vMKMUZ/p
nqUdjxHohpi/+Gv0I7xak93WtBwQ+f9KpnCe4Q==</xenc:CipherValue>
</xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>DLFpfO8VzrLeAbOJ6wOIjYGbd5fBccJw1FyNTMnquQQqrQmIbylY6s3qtcCBw50nuFf7yEp6ZmIm
xdiW5GejRkAj4Tk20r/ZjZU9doiILcC/FYkNcV5rKfs9Ko6/qXaic0B/Bd6PHJ0hL+lM4J9fliug
d307//i6TcmNaPRQYnu1kt1T72MKpatGee3kXyj3hx0aQGrQokIwb2GTVGSBm3HNj23O40x+nInb
CStTwzdz5C+HdDXwq1SZ1KBoR4bgqJghvM17abfr83hQj3TIcafvi5nW8/yDoKmC1YS+ZCx0yJBJ
siqUVk/yq4M/HK7FE02ZAGGFOhyAyuDunUhShFjFj2GH46zPRWnzB105HMeSQ42xbtlXn+eQ+DjA
5Trt</xenc:CipherValue>
</xenc:CipherData></xenc:EncryptedData></saml:EncryptedID><samlp:SessionIndex>_2565117589092266050</samlp:SessionIndex></samlp:LogoutRequest>
2019-02-18 09:12:02 DEBUG OpenSAML.MessageEncoder.SAML2POST [46] [default]: message encoded, sending HTML form template to client
2019-02-18 09:12:02 INFO Shibboleth.SessionCache [46] [default]: removed session (_5737c58b56cf0b5e8d70425338b74c55)
2019-02-18 09:12:40 INFO XMLTooling.StorageService : purged 7 expired record(s) from storage
2019-02-18 09:12:49 DEBUG Shibboleth.Listener [46] [default]: dispatching message (default/Login::run::SAML2SI)
2019-02-18 09:12:49 DEBUG XMLTooling.StorageService [46] [default]: inserted record (8e61e7c654c9c43ac2743e2327fa68aace45796df9cd5c6507304a962c00fe37) in context (RelayState) with expiration (1550481769)
2019-02-18 09:12:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [46] [default]: validating input
2019-02-18 09:12:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [46] [default]: marshalling, deflating, base64-encoding the message
2019-02-18 09:12:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [46] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://cas.example.org/ssoserver/profile/SAML2/Redirect/SSO" ID="_b7c7e62e6c95410c03ee965c306517a7" IssueInstant="2019-02-18T09:12:49Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-02-18 09:12:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [46] [default]: message encoded, sending redirect to client
2019-02-18 09:12:58 DEBUG Shibboleth.Listener [35] [default]: dispatching message (default/SAML2/POST)
2019-02-18 09:12:58 DEBUG OpenSAML.MessageDecoder.SAML2POST [35] [default]: validating input
2019-02-18 09:12:58 DEBUG OpenSAML.MessageDecoder.SAML2POST [35] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_3687329882374886269" InResponseTo="_b7c7e62e6c95410c03ee965c306517a7" IssueInstant="2019-02-18T09:12:58.136Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://cas.example.org/ssoserver</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_3687329882374886269">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>vX9TNgyhcv0KGp3vO8l11MVrcvh3T1DnwF7ur3mwCbDBGrD1gIMvoTEaGSY3hK5BwTIIqDtbPX9A
3DpjBctc6Q==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
iaofoVVGW0EUP5hBu8J8AKcCe5EzSxkdwecsL6IZdrr7HZLuhWv8yiIeO5zeH6lutuPcfFdYfy1H
up/sYTdUEZ5y/7PLLR201UCyX/2Dv6jdUw3VfiQMRZCfAEQS9XoiHUjE83eIYVtscsx27jdUU3TO
xsrxzbCkc6j7y4KIKr49veu4hlJ5wNif6eZ3IjC12S/gRO8mK1eh2Qc3aQjGmvuueCFQADGwXqY9
G9E7Aqwt34nwhAAVLVYRIXUoU6pfMPfFcJ0uK+Lg7Kc9X/eWN+Mh5CDdAQG+P1aPRLRr675+qfd5
DHZcxwu1o5I4AEowkhFHitsTGW66O/A9oc4e9Q==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDHTCCAgWgAwIBAgIUNsClbOBPdlurplA1uPYm/WMgv+swDQYJKoZIhvcNAQELBQAwGjEYMBYG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_5309317582573440000" IssueInstant="2019-02-18T09:12:58.122Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer>https://cas.example.org/ssoserver</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_5309317582573440000">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>BLQpthA2BtAiYsOm7CPkO4MfxmZpCjromoTO/D1Kg8avWvhZMjmGVQVYjxwjw4elRye0Ud4Uv/yi
Pcwz0OEKuw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
FMGBdfNvUR7hjtYGLhgb36gRTHJDBUYc3Hw9lO+abrBrdpegaVwStT6WR20eTiusVTxavPtBvA2b
157/LATX6bWIxCXYauSLyTjl/waoef27o49hD19PXl11dSkK/mg2KsrBga+b4JZC+ob7Cr2uqx8G
Loga1u2LsAYcFVgyOYxD9LBKq5/gnkGkVQt73Y34IeVv4e7G8UHjdVNhG77qw+8WW73rrn7DJWu3
zg2hWc0MW/wnfUa/HCycEVL2FHK+uM5wBBtk+172ipSu5tlOPKcD2+hnYVd+5z2oulIk62IXJhlC
tH7fZpNYGpKpedOL216XrYsUsFJ3PXdNZpX1qg==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDHTCCAgWgAwIBAgIUNsClbOBPdlurplA1uPYm/WMgv+swDQYJKoZIhvcNAQELBQAwGjEYMBYG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://samltest.id/saml/sp" SPNameQualifier="https://samltest.id/saml/sp">/YGI1R3W50kQU6wfh+gt/9PDyyY=</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_b7c7e62e6c95410c03ee965c306517a7" NotOnOrAfter="2019-02-18T10:02:58.122Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-02-18T09:12:58.123Z" NotOnOrAfter="2019-02-18T10:02:58.123Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-02-18T09:12:57.104Z" SessionIndex="_4765946256082489338" SessionNotOnOrAfter="2019-02-18T10:02:57.104Z"><saml2:SubjectLocality Address="52.38.135.244"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="uid" Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>lihn</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="role" Name="role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>user</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="passwd" Name="passwd" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>111111</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="sex" Name="sex" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="roles" Name="roles" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>juse1</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="name" Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>李海宁</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="groups" Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>test</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="company" Name="company" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="tel" Name="tel" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="position" Name="position" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>null</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="email" Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><saml2:AttributeValue>lihn@sohu.com</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-02-18 09:12:58 DEBUG OpenSAML.MessageDecoder.SAML2 [35] [default]: extracting issuer from SAML 2.0 protocol message
2019-02-18 09:12:58 DEBUG OpenSAML.MessageDecoder.SAML2 [35] [default]: message from (https://cas.example.org/ssoserver)
2019-02-18 09:12:58 DEBUG OpenSAML.MessageDecoder.SAML2 [35] [default]: searching metadata for message issuer...
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [35] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 09:12:58 DEBUG XMLTooling.StorageService [35] [default]: inserted record (_3687329882374886269) in context (MessageFlow) with expiration (1550481418)
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [35] [default]: validating signature profile
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [35] [default]: signature verified against message issuer
2019-02-18 09:12:58 DEBUG Shibboleth.SSO.SAML2 [35] [default]: processing message against SAML 2.0 SSO profile
2019-02-18 09:12:58 DEBUG Shibboleth.SSO.SAML2 [35] [default]: extracting issuer from SAML 2.0 assertion
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [35] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 09:12:58 DEBUG XMLTooling.StorageService [35] [default]: inserted record (_5309317582573440000) in context (MessageFlow) with expiration (1550481418)
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [35] [default]: validating signature profile
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [35] [default]: signature verified against message issuer
2019-02-18 09:12:58 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [35] [default]: assertion satisfied bearer confirmation requirements
2019-02-18 09:12:58 DEBUG Shibboleth.SSO.SAML2 [35] [default]: SSO profile processing completed successfully
2019-02-18 09:12:58 DEBUG Shibboleth.SSO.SAML2 [35] [default]: extracting pushed attributes...
2019-02-18 09:12:58 DEBUG Shibboleth.AttributeExtractor.XML [35] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-02-18 09:12:58 DEBUG Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-02-18 09:12:58 DEBUG Shibboleth.AttributeExtractor.XML [35] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: uid, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: role, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: passwd, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: sex, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: roles, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: name, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: groups, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: company, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: tel, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: position, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 INFO Shibboleth.AttributeExtractor.XML [35] [default]: skipping unmapped SAML 2.0 Attribute with Name: email, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:basic
2019-02-18 09:12:58 DEBUG Shibboleth.SessionCache [35] [default]: creating new session
2019-02-18 09:12:58 DEBUG Shibboleth.SessionCache [35] [default]: storing new session...
2019-02-18 09:12:58 DEBUG XMLTooling.StorageService [35] [default]: inserted record (session) in context (_100655850907440335bd2f32b5fd42ac) with expiration (1550484778)
2019-02-18 09:12:58 DEBUG XMLTooling.StorageService [35] [default]: updated record (/YGI1R3W50kQU6wfh+gt/9PDyyY=) in context (NameID) with expiration (1550484357)
2019-02-18 09:12:58 INFO Shibboleth.SessionCache [35] [default]: new session created: ID (_100655850907440335bd2f32b5fd42ac) IdP (https://cas.example.org/ssoserver) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.25.18)
2019-02-18 09:12:58 DEBUG XMLTooling.StorageService [35] [default]: deleted record (8e61e7c654c9c43ac2743e2327fa68aace45796df9cd5c6507304a962c00fe37) in context (RelayState)
2019-02-18 09:12:58 DEBUG Shibboleth.SSO.SAML2 [35] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-02-18 09:12:58 DEBUG Shibboleth.Listener [35]: dispatching message (default::getHeaders::Application)
2019-02-18 09:12:58 DEBUG Shibboleth.Listener [35] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 09:12:58 DEBUG XMLTooling.StorageService [35] [default]: updated expiration of valid records in context (_100655850907440335bd2f32b5fd42ac) to (1550484778)
2019-02-18 09:12:59 DEBUG Shibboleth.Listener [35] [default]: dispatching message (touch::StorageService::SessionCache)
2019-02-18 09:12:59 DEBUG XMLTooling.StorageService [35] [default]: updated expiration of valid records in context (_100655850907440335bd2f32b5fd42ac) to (1550484779)
2019-02-18 09:12:59 DEBUG Shibboleth.Listener [45] [default]: dispatching message (default/Login::run::SAML2SI)
2019-02-18 09:12:59 DEBUG XMLTooling.StorageService [45] [default]: inserted record (9ba278dfbaa270c0f362bfe0e1aea007fbce2f40283ea5233eddd4a64491e792) in context (RelayState) with expiration (1550481779)
2019-02-18 09:12:59 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: validating input
2019-02-18 09:12:59 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: signing and marshalling the message
2019-02-18 09:12:59 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://phenixid.local:8443/saml/authenticate/login" ID="_69c5d42099debe28236088adec37086f" IssueInstant="2019-02-18T09:12:59Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_69c5d42099debe28236088adec37086f">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>jsIIhB2hta1bIAfre+lrMLnDbDAaiSr/Arjg8Z5klmg=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>oijK+A2kXQd3E2v8GxwZBjXuN8F5UoJeE9QkazeXycfJvfPCBRs2dQOV4j9lhrDg
yUjEdk5J+BEcRUIBdDgxR3YKuw5KuY59JETlqVBrFdbICtdR6Z6rQHAlJyxN66Zp
bpuk404BjUobtzsfqBufWeB47iOzRnn7vXXwPJuzbsv75nEYj48vpRcJvVGcsSbe
ozQcvI4S5UQxXLuHMh+EkeLaO4iI762dSbGtv/aOgaMprtJzH+Eiv0NUP/ftsYrD
h/AZEs3V/EXYPiXG3BIPDhRo5voP7mfXbfOF3iGHadmGEPYGU6YPhvWMRzAt/wKQ
1eA2i5UDs97ilZaOyl1cK25T78KE2LA/C3idDiJn2pQv6Fpdr45OSdVrcYpceM1O
tGya7M6mE4GGAGEb9MPo4f43aPTShC+xw5MXkIBNycdHv0syfwEKKFHxzsQ1nljK
f80WED/MV0+F0ibz8rQZvz2agIouq6dI7GT36xBnzp0cy/d4cjULDDAtpNQ/1ZPa</ds:SignatureValue>
<ds:KeyInfo><ds:KeyName>ip-172-31-28-64.us-west-2.compute.internal</ds:KeyName><ds:X509Data><ds:X509SubjectName>CN=ip-172-31-28-64.us-west-2.compute.internal</ds:X509SubjectName><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKmtzjCD1+tqMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNV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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-02-18 09:12:59 DEBUG OpenSAML.MessageEncoder.SAML2POST [45] [default]: message encoded, sending HTML form template to client
2019-02-18 09:13:26 DEBUG Shibboleth.Listener [47] [default]: dispatching message (default/SAML2/POST)
2019-02-18 09:13:26 DEBUG OpenSAML.MessageDecoder.SAML2POST [47] [default]: validating input
2019-02-18 09:13:26 DEBUG OpenSAML.MessageDecoder.SAML2POST [47] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xs="http://www.w3.org/2001/XMLSchema" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_cb45d135febad6a766a4d7a384d01f6d" InResponseTo="_69c5d42099debe28236088adec37086f" IssueInstant="2019-02-18T09:13:24Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://phenixid.local</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_cb45d135febad6a766a4d7a384d01f6d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xs"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>0dzdnfNNBDU1gR1c980rRJYyMbk=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>SZNJD0w6NMBnjvFgWVVGGqc5ohGbl6XhNML/CztKRuZ8pd9+yk9CbWiDSum2oOpZYEi1qPcPKO1s
l+drcTZVr8WlILKWrmXSXjw9NoaBRBxO7Aw1L+J5gde419WSkEqEIkdGxz4XGQthIi+LsXfHtr47
b8QCp6ccQiXgRbgDB9nwVAnymTnzMUHFyxWv6ykXzgays/NqChBb4Jt0Xx73NELgYEhNBXYhIeV2
tCG7E6KupVisxHEbpQdBRsebQo0pp+pkwb6OdXwC+AnVTpN5o61BE9qkmvbsTt0Z1F1BPJnDYJGX
KuvN9KAUCKUPySXkbauYz3G8TVH6y3jkGtnnLg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIICrjCCAZagAwIBAgIEW+lMXDANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDDA5waGVuaXhpZC5s
b2NhbDAeFw0xODExMTIwOTQ4MTJaFw0xOTExMTIwOTQ4MTJaMBkxFzAVBgNVBAMMDnBoZW5peGlk
LmxvY2FsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE6uyON6xVYP/3n+85HBEZ13
ly62LEpmRUlpluz+ekMF2L7SDdc/tP0wpWqeYgwtbAzApgedD5LOL8UcDEOLjGsuDrwzg621eBZD
W74qOGF7NSjjtm66aFd/5xSjma5fwmEDqZ26OEMcRBxnglC/4aOsWD0WMbK6F9I//dXeTNM4cN8Z
S9mZgqr8BKKv0QtHKluCzD9LiNZS/e6W+pG6caoyOaYO1Ilr5wbhwtYz4rh3yMraf4q21QBzpbzH
RDzpLhnk7G+kvKAm/cSBCT+y/X8NikkTZjTSFJWnYhULc+xi86qzwsxU5V6Bu1aGQLkYIMaq+vdm
wL0kTPvNQ6zlDwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCFXJrshz6yZ4pXC0SjYaNJG5h+KWIa
pd62XOKQ0cEJm2P3pqU+lCHLS7r+zRCuQE2OlnzzJJmsMPx4svfikoye66pKTgwo3s3iACmrj2by
R8c0A7kCESu4/94wSwmPrkuCqcxa+a0usjO/bwN9pCs+sk3mA8scGEcUN8/VLM36g7aSFZ6QSoPo
ejj8ctph8izzjv3H0/JRnuFaGeZqJwfpRCTJTyvjyHLWozQNSLfr2dQG6y0gY0gSmN8pqvkfPh/Q
vPKl/I3OYD+nt3LFzOqaF2Fl9MlHWH+kHGl3TFR3qyvYL5xJGcG474l/lUxjXJCswl3KfzX+CWQC
ijHSv+3y</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_b9e3ac3c09aed4773ba6bcae00d55fbe" IssueInstant="2019-02-18T09:13:24Z" Version="2.0"><saml2:Issuer>https://phenixid.local</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">196811266631</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_69c5d42099debe28236088adec37086f" NotOnOrAfter="2019-02-18T09:15:24Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-02-18T09:13:24Z" NotOnOrAfter="2019-02-18T09:15:24Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-02-18T09:13:24Z" SessionIndex="e429420a-d768-429a-b10a-45ce25907207"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:XMLDSig</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute Name="userSurName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">Forsgren</saml2:AttributeValue></saml2:Attribute><saml2:Attribute Name="userGivenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">Lars</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-02-18 09:13:26 DEBUG OpenSAML.MessageDecoder.SAML2 [47] [default]: extracting issuer from SAML 2.0 protocol message
2019-02-18 09:13:26 DEBUG OpenSAML.MessageDecoder.SAML2 [47] [default]: message from (https://phenixid.local)
2019-02-18 09:13:26 DEBUG OpenSAML.MessageDecoder.SAML2 [47] [default]: searching metadata for message issuer...
2019-02-18 09:13:26 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [47] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 09:13:26 DEBUG XMLTooling.StorageService [47] [default]: inserted record (_cb45d135febad6a766a4d7a384d01f6d) in context (MessageFlow) with expiration (1550481444)
2019-02-18 09:13:26 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [47] [default]: validating signature profile
2019-02-18 09:13:26 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [47] [default]: signature verified against message issuer
2019-02-18 09:13:26 DEBUG Shibboleth.SSO.SAML2 [47] [default]: processing message against SAML 2.0 SSO profile
2019-02-18 09:13:26 DEBUG Shibboleth.SSO.SAML2 [47] [default]: extracting issuer from SAML 2.0 assertion
2019-02-18 09:13:26 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [47] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-02-18 09:13:26 DEBUG XMLTooling.StorageService [47] [default]: inserted record (_b9e3ac3c09aed4773ba6bcae00d55fbe) in context (MessageFlow) with expiration (1550481444)
2019-02-18 09:13:26 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [47] [default]: assertion satisfied bearer confirmation requirements
2019-02-18 09:13:26 DEBUG Shibboleth.SSO.SAML2 [47] [default]: SSO profile processing completed successfully
2019-02-18 09:13:26 DEBUG Shibboleth.SSO.SAML2 [47] [default]: extracting pushed attributes...
2019-02-18 09:13:26 DEBUG Shibboleth.AttributeExtractor.XML [47] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-02-18 09:13:26 DEBUG Shibboleth.AttributeExtractor.XML [47] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2019-02-18 09:13:26 DEBUG Shibboleth.AttributeExtractor.XML [47] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-02-18 09:13:26 INFO Shibboleth.AttributeExtractor.XML [47] [default]: skipping unmapped SAML 2.0 Attribute with Name: userSurName
2019-02-18 09:13:26 INFO Shibboleth.AttributeExtractor.XML [47] [default]: skipping unmapped SAML 2.0 Attribute with Name: userGivenName
2019-02-18 09:13:26 DEBUG Shibboleth.SessionCache [47] [default]: creating new session
2019-02-18 09:13:26 DEBUG Shibboleth.SessionCache [47] [default]: storing new session...
2019-02-18 09:13:26 DEBUG XMLTooling.StorageService [47] [default]: inserted record (session) in context (_82688eed4b42d07a8794e5f77a94f6c4) with expiration (1550484806)
2019-02-18 09:13:26 DEBUG XMLTooling.StorageService [47] [default]: inserted record (196811266631) in context (NameID) with expiration (1550510006)
2019-02-18 09:13:26 INFO Shibboleth.SessionCache [47] [default]: new session created: ID (_82688eed4b42d07a8794e5f77a94f6c4) IdP (https://phenixid.local) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.33.243)
2019-02-18 09:13:26 DEBUG XMLTooling.StorageService [47] [default]: deleted record (9ba278dfbaa270c0f362bfe0e1aea007fbce2f40283ea5233eddd4a64491e792) in context (RelayState)
2019-02-18 09:13:26 DEBUG Shibboleth.SSO.SAML2 [47] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-02-18 09:13:27 DEBUG Shibboleth.Listener [47]: dispatching message (default::getHeaders::Application)
2019-02-18 09:13:27 DEBUG Shibboleth.Listener [47] [default]: dispatching message (find::StorageService::SessionCache)
2019-02-18 09:13:27 DEBUG XMLTooling.StorageService [47] [default]: updated expiration of valid records in context (_82688eed4b42d07a8794e5f77a94f6c4) to (1550484807)
2019-02-18 09:13:27 DEBUG Shibboleth.Listener [47] [default]: dispatching message (touch::StorageService::SessionCache)
2019-02-18 09:13:27 DEBUG XMLTooling.StorageService [47] [default]: updated expiration of valid records in context (_82688eed4b42d07a8794e5f77a94f6c4) to (1550484807)
2019-02-18 09:22:18 INFO Shibboleth.Listener [42]: detected socket closure, shutting down worker thread