2021-05-07 03:33:59 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: extracting issuer from SAML 2.0 protocol message
2021-05-07 03:33:59 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: message from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:33:59 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: searching metadata for message issuer...
2021-05-07 03:33:59 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: recovered request/response correlation value (_2b73ba23b07dd0041f3c64c069dfa6d1)
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:33:59 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (_05fdbe76ff156664cce6c360ebcaacff) in context (MessageFlow) with expiration (1620358679)
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32561] [default]: validating signature profile
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolving ds:X509Certificate
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 1 certificate(s)
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 0 CRL(s)
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolving ds:X509Certificate
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 1 certificate(s)
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 0 CRL(s)
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32561] [default]: signature verified against message issuer
2021-05-07 03:33:59 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: processing message against SAML 2.0 SSO profile
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 0 certificate(s)
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolving ds:X509Certificate
2021-05-07 03:33:59 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 1 certificate(s)
2021-05-07 03:33:59 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_3edc07ea2911964d6ddb5f9ed73d9937" IssueInstant="2021-05-07T03:33:59.530Z" Version="2.0"><saml2:Issuer>https://shib.ust.hk/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://shib.ust.hk/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQxD5q0hpme9ClfizQu8VsQZFBazObcFcBsmmHSY22OsSmGSSndLlruLQu7XN8/Mi2PsZZ0MeGNlXumBO12dIKkiRQl8dWBuciLq97Q8APEbqog+oSj7frpuY+5V1rfaQ==</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="172.17.0.1" InResponseTo="_2b73ba23b07dd0041f3c64c069dfa6d1" NotOnOrAfter="2021-05-07T03:38:59.549Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T03:33:59.530Z" NotOnOrAfter="2021-05-07T03:38:59.530Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T03:33:53.406Z" SessionIndex="_8ac0b5c5b5c77e7c3c78145c2cbac04f"><saml2:SubjectLocality Address="172.17.0.1"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Unspecified</saml2:AuthnContextClassRef><saml2:AuthenticatingAuthority>https://sts.windows.net/c917f3e2-9322-4926-9bb3-daca730413ca/</saml2:AuthenticatingAuthority></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai@ust.hk</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>Yiu Fai</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai@ust.hk</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2021-05-07 03:33:59 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: extracting issuer from SAML 2.0 assertion
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:33:59 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (_3edc07ea2911964d6ddb5f9ed73d9937) in context (MessageFlow) with expiration (1620358679)
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32561] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:33:59 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32561] [default]: assertion satisfied bearer confirmation requirements
2021-05-07 03:33:59 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: SSO profile processing completed successfully
2021-05-07 03:33:59 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: extracting pushed attributes...
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeExtractor.XML [32561] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeExtractor.XML [32561] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeExtractor.XML [32561] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeDecoder.Scoped [32561] [default]: decoding ScopedAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeDecoder.String [32561] [default]: decoding SimpleAttribute (givenName) from SAML 2 Attribute (urn:oid:2.5.4.42) with 1 value(s)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeDecoder.String [32561] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeDecoder.String [32561] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeFilter [32561] [default]: filtering 4 attribute(s) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (uid) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (mail) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (givenName) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:33:59 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (eppn) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:33:59 DEBUG Shibboleth.SessionCache [32561] [default]: creating new session
2021-05-07 03:33:59 DEBUG Shibboleth.SessionCache [32561] [default]: storing new session...
2021-05-07 03:33:59 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (session) in context (_43d62387c11ef00003dd37303dd53a28) with expiration (1620362039)
2021-05-07 03:33:59 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (AAdzZWNyZXQxD5q0hpme9ClfizQu8VsQZFBazObcFcBsmmHSY22OsSmGSSndLlruLQu7XN8/Mi2PsZZ0MeGNlXumBO12dIKkiRQl8dWBuciLq97Q8APEbqog+oSj7frpuY+5V1rfaQ==) in context (NameID) with expiration (1620387239)
2021-05-07 03:33:59 INFO Shibboleth.SessionCache [32561] [default]: new session created: ID (_43d62387c11ef00003dd37303dd53a28) IdP (https://shib.ust.hk/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.27.23)
2021-05-07 03:33:59 DEBUG XMLTooling.StorageService [32561] [default]: deleted record (2e57123b8017d4ac024aa30ebcbc873380a5b92b2bcc25399eeccd2ec23e7905) in context (RelayState)
2021-05-07 03:33:59 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2021-05-07 03:34:00 DEBUG Shibboleth.Listener [32561]: dispatching message (default::getHeaders::Application)
2021-05-07 03:34:00 DEBUG Shibboleth.Listener [32561] [default]: dispatching message (find::StorageService::SessionCache)
2021-05-07 03:34:00 DEBUG XMLTooling.StorageService [32561] [default]: updated expiration of valid records in context (_43d62387c11ef00003dd37303dd53a28) to (1620362040)
2021-05-07 03:34:00 DEBUG Shibboleth.Listener [32561] [default]: dispatching message (touch::StorageService::SessionCache)
2021-05-07 03:34:00 DEBUG XMLTooling.StorageService [32561] [default]: updated expiration of valid records in context (_43d62387c11ef00003dd37303dd53a28) to (1620362040)
2021-05-07 03:34:23 DEBUG Shibboleth.Listener [32559] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 03:34:23 INFO OpenSAML.MetadataProvider.Dynamic [32559] [default]: resolving metadata for (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz)
2021-05-07 03:34:23 INFO OpenSAML.MetadataProvider.Dynamic [32559] [default]: caching resolved metadata for (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz)
2021-05-07 03:34:23 INFO OpenSAML.MetadataProvider.Dynamic [32559] [default]: next refresh of metadata for (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz) no sooner than 28800 seconds
2021-05-07 03:34:23 DEBUG XMLTooling.StorageService [32559] [default]: inserted record (d8c2563d3af46140eb5487d7dfc0a28600fcd116d823c0b1f212d39b8780c0f5) in context (RelayState) with expiration (1620359063)
2021-05-07 03:34:23 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32559] [default]: validating input
2021-05-07 03:34:23 DEBUG OpenSAML.MessageEncoder.SAML2 [32559] [default]: tracking request (_bc42c8f5892f39cc2b56ebc4623999c1) against RelayState token (ss:mem:d8c2563d3af46140eb5487d7dfc0a28600fcd116d823c0b1f212d39b8780c0f5)
2021-05-07 03:34:23 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32559] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 03:34:23 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32559] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz" ID="_bc42c8f5892f39cc2b56ebc4623999c1" IssueInstant="2021-05-07T03:34:23Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 03:34:23 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32559] [default]: message encoded, sending redirect to client
2021-05-07 03:34:26 DEBUG Shibboleth.Listener [32559] [default]: dispatching message (default/SAML2/POST)
2021-05-07 03:34:26 DEBUG OpenSAML.MessageDecoder.SAML2POST [32559] [default]: validating input
2021-05-07 03:34:26 DEBUG OpenSAML.MessageDecoder.SAML2POST [32559] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_06bb441d-ef3c-4ea9-af9a-b4a4dcc55f42" InResponseTo="_bc42c8f5892f39cc2b56ebc4623999c1" IssueInstant="2021-05-07T03:34:26.464Z" Version="2.0"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_06bb441d-ef3c-4ea9-af9a-b4a4dcc55f42">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>ce36iXu+u8FARLkkBjWIHlC7CXrJnBEN6oincc1v5m4=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
MejSphlwqfepZ5RDhzD7Je2tzSp0RkZmvOlX6tVhpBPsk6GPqS9ualV2h+T9igzs1fYydlaYNyyT
yOMOzB4tc9IGjWko9KAVIxTxvuuWuOIM5Wcx786mAZmqMGZ1GM15SGSOkJDJssSWBZAWABefLNrH
byIEtU4F/cZSVPVG/jeY7vd7ZvP7bqwsaSginqKo9cfE4uPggeUexeEqbwJlvyR7n5yGViKFE6gi
JPeapij60mXvrz0JsdpsIoDloHcwwhas97ca8LzVwd8ODj8tb+8f7mNrQWiWKVXtshk7nohWYoRI
h7YCwz/b+aKg2KZ4WIaKMIwPCCHDfFLrqgqLqg==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_ea66f3c3-2d15-4120-82ce-595e8761baaf" IssueInstant="2021-05-07T03:34:26.464Z" Version="2.0"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_ea66f3c3-2d15-4120-82ce-595e8761baaf">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>bq3TdcAdDJZInvGVNMO6UCmxjTk8LoGM4PUCxb+iXxs=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
M84+/KJBfPyQSDAslENmy9jqZRGXv1Vq6PT10FdJUi0hlOljljQDVbCIE2gpmsUYJFF46C7ZzhP/
sLpaCEBnIrsuaTqd9xpvIJWta8NFWQL2ZeEv9z/yrQCx0qHAcnnokKOQKEH6lTFSH/kIQOYjTHoB
Y/IZm9zjLsPmeRVQYedgmLTxTZrM9tYxRFyc6IfYLBpRxnOim+wbriiLZq4edYRmr7RtXOTRfcOj
90wfw60wbEZXbs/K6XmPP141/f3MquGFR+4CBCZsPEplkW0HPe20LtiouEy+IrXqZ9Dd603amnUi
dzY/mjI23MZyaumbYgZh9qMpHPO1hokgkS5fdA==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDAzCCAeugAwIBAgIBATANBgkqhkiG9w0BAQsFADBFMRYwFAYDVQQDDA1hbWF6b25hd3MuY29tMQ0wCwYDVQQLDARJREFTMQ8wDQYDVQQKDAZBbWF6b24xCzAJBgNVBAYTAlVTMB4XDTIxMDMxNjA4MzgwMFoXDTI2MDMxNjA4MzgwMFowRTEWMBQGA1UEAwwNYW1hem9uYXdzLmNvbTENMAsGA1UECwwESURBUzEPMA0GA1UECgwGQW1hem9uMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+m++2qNSIf0JwUn05T6AkTZMSSX9R+cRZX4jNU8paUmM3riKfKQmcA5rYy3keWRkT2E5vGx4K3v/y3q7j/odz9fZ3ti6HQPHBVcJAewBLPrbVsKn/LIhAk39xTvrE4R+Z4SHpAHTJYYDX1Iit6MAC6Be1SVlUnO+ItFbeXdgR962/aZrKL3qzE6pXgQY7WTDSJv5XSUAPDs25HusVsj1q+mSMbzpqv95p2wGYSvSx6wBPJ4btbCmOtnk92YJh2dNTbWtwdQm2yxskjPCpj8GkEIW1YXS0GF63dyTw+IRHszP5FCLGwrpR385Te50Kf1u2gyFXiUe0J7ts5y6gzISECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAF5SCjCtCUAe8Q+2EGRu4FWMNsBbRVNO+FzjmJFFc6fV+M/BZyROIanXlbBWlthp83dhoNxRf6nrRrjl7FeaaGfVns+vI0IWmfc81XSG2N3q/P5TqTBiGMk4Uxqg+HBc58bCOnjQZi1pTLcc6wKLC3mRKklQmKpmHoWlQE56WvRgD26WDclVc10eQwW+JrrMLZlvew0xSabCibRHghTngQkallOgxVKZE3pCpiqk8c4oKyGSPNyzUKmE53KxYfneXivPDvmkPVy64M1ETpkLlweq4fCcoPR6H5qY4SlCkuDClWF6AjsPZ5B4GxUbUoSmeLS/4dZkgF7zIJbKZxSUUCg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" SPNameQualifier="https://samltest.id/saml/sp">Eric--Niu@live.com</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_bc42c8f5892f39cc2b56ebc4623999c1" NotOnOrAfter="2021-05-07T04:34:26.465Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T03:29:26.465Z" NotOnOrAfter="2021-05-07T04:34:26.465Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T03:34:26.465Z" SessionIndex="_9a1b2bca-b13d-43ef-815d-541012dfaf4f" SessionNotOnOrAfter="2021-05-07T04:34:26.465Z"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement/></saml2:Assertion></saml2p:Response>
2021-05-07 03:34:26 WARN Shibboleth.SSO.SAML2 [32559] [default]: error processing incoming assertion: AttributeStatement must have at least one Attribute.
2021-05-07 03:35:07 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 03:35:07 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (aa16352a41bd17a6abb60c18e2a1b6c57cc75e03d6ddf8ed648456057f7d65a4) in context (RelayState) with expiration (1620359107)
2021-05-07 03:35:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32562] [default]: validating input
2021-05-07 03:35:07 DEBUG OpenSAML.MessageEncoder.SAML2 [32562] [default]: tracking request (_27fad4b4e06b9048884671fe620c83c3) against RelayState token (ss:mem:aa16352a41bd17a6abb60c18e2a1b6c57cc75e03d6ddf8ed648456057f7d65a4)
2021-05-07 03:35:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32562] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 03:35:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32562] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz" ID="_27fad4b4e06b9048884671fe620c83c3" IssueInstant="2021-05-07T03:35:07Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 03:35:07 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32562] [default]: message encoded, sending redirect to client
2021-05-07 03:35:10 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (default/SAML2/POST)
2021-05-07 03:35:10 DEBUG OpenSAML.MessageDecoder.SAML2POST [32562] [default]: validating input
2021-05-07 03:35:10 DEBUG OpenSAML.MessageDecoder.SAML2POST [32562] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_8374a6fa-8f35-43b5-9a90-7f2b81d10964" InResponseTo="_27fad4b4e06b9048884671fe620c83c3" IssueInstant="2021-05-07T03:35:10.128Z" Version="2.0"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_8374a6fa-8f35-43b5-9a90-7f2b81d10964">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xsd"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>AjC7FJnwIUKyC1LtGA7lD7RHJNiv+IAM9tIB7+aV0VA=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
IG+yPUXmM07X+eoRuso3FDu4Ki/UkbqvM4mebUuzPHJ6KGC5CxR+4ps5L8U++j49CMk6jorM2MBA
5vHwW+ZdhzWKs+IUuODmGcjRxusE48VuX95/4CbAAMmrr9aM87kE6G3GLE/yFoS0aNZez3DcKT9L
4r3b8+LZAAimB7WbXMWxrHUe0Drh/jwankHLXk/CIZT23rvIFeIxRYPOb/BoTJAXIcmm/v2M3PtC
pKrP3cmsJ7X3mi0UC6Ud0RLvvS8GmJrJujwYXwAZ6tzOvChjtDfGWqtMkRrKbz/nX/ujFPco2Hvy
Cd44/Ada12r10FCLPIlbR6c5gp5J3qk2DiiPYA==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDAzCCAeugAwIBAgIBATANBgkqhkiG9w0BAQsFADBFMRYwFAYDVQQDDA1hbWF6b25hd3MuY29tMQ0wCwYDVQQLDARJREFTMQ8wDQYDVQQKDAZBbWF6b24xCzAJBgNVBAYTAlVTMB4XDTIxMDMxNjA4MzgwMFoXDTI2MDMxNjA4MzgwMFowRTEWMBQGA1UEAwwNYW1hem9uYXdzLmNvbTENMAsGA1UECwwESURBUzEPMA0GA1UECgwGQW1hem9uMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+m++2qNSIf0JwUn05T6AkTZMSSX9R+cRZX4jNU8paUmM3riKfKQmcA5rYy3keWRkT2E5vGx4K3v/y3q7j/odz9fZ3ti6HQPHBVcJAewBLPrbVsKn/LIhAk39xTvrE4R+Z4SHpAHTJYYDX1Iit6MAC6Be1SVlUnO+ItFbeXdgR962/aZrKL3qzE6pXgQY7WTDSJv5XSUAPDs25HusVsj1q+mSMbzpqv95p2wGYSvSx6wBPJ4btbCmOtnk92YJh2dNTbWtwdQm2yxskjPCpj8GkEIW1YXS0GF63dyTw+IRHszP5FCLGwrpR385Te50Kf1u2gyFXiUe0J7ts5y6gzISECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAF5SCjCtCUAe8Q+2EGRu4FWMNsBbRVNO+FzjmJFFc6fV+M/BZyROIanXlbBWlthp83dhoNxRf6nrRrjl7FeaaGfVns+vI0IWmfc81XSG2N3q/P5TqTBiGMk4Uxqg+HBc58bCOnjQZi1pTLcc6wKLC3mRKklQmKpmHoWlQE56WvRgD26WDclVc10eQwW+JrrMLZlvew0xSabCibRHghTngQkallOgxVKZE3pCpiqk8c4oKyGSPNyzUKmE53KxYfneXivPDvmkPVy64M1ETpkLlweq4fCcoPR6H5qY4SlCkuDClWF6AjsPZ5B4GxUbUoSmeLS/4dZkgF7zIJbKZxSUUCg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_a0e60c19-7e59-422d-ac5c-ecddb5a3d98b" IssueInstant="2021-05-07T03:35:10.128Z" Version="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_a0e60c19-7e59-422d-ac5c-ecddb5a3d98b">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xsd"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>nLk0aRzx0Rlr96OlT37Ipe7SN6JNj5tlUEJ+y666pQA=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Y1dyH4Az6oeb0ik1qx7fPzcdMxWnqT1T0/kWttzrZ0fJ0CYXATy+Gg79FSRgbfDadxuMWvezUiCv
RAxhVJWDnAUDvi9+TLpJZZ1/hpzxoV/UsDGW0dJLQnW0N4HaanSfZ1+/L70MI4TzNv8Ydtf/od1X
ufK6rGpyJ3iuxjU/r+fX7PyN5IStTyQ98RCRQPhqFAGID/gbmB10SCZ6Hu+mSbLNZVAROHmy+7ba
IBTEjcAmuYJQW7c0cNbsra0DQPY7syqf4Zu1sSG089hgf8kuLKX/zaCMf810hmEJL6RRo1eqkZWz
VgznableeJgsqZ9WwLqLmTG0RSkmUbbu6D/Gig==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDAzCCAeugAwIBAgIBATANBgkqhkiG9w0BAQsFADBFMRYwFAYDVQQDDA1hbWF6b25hd3MuY29tMQ0wCwYDVQQLDARJREFTMQ8wDQYDVQQKDAZBbWF6b24xCzAJBgNVBAYTAlVTMB4XDTIxMDMxNjA4MzgwMFoXDTI2MDMxNjA4MzgwMFowRTEWMBQGA1UEAwwNYW1hem9uYXdzLmNvbTENMAsGA1UECwwESURBUzEPMA0GA1UECgwGQW1hem9uMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+m++2qNSIf0JwUn05T6AkTZMSSX9R+cRZX4jNU8paUmM3riKfKQmcA5rYy3keWRkT2E5vGx4K3v/y3q7j/odz9fZ3ti6HQPHBVcJAewBLPrbVsKn/LIhAk39xTvrE4R+Z4SHpAHTJYYDX1Iit6MAC6Be1SVlUnO+ItFbeXdgR962/aZrKL3qzE6pXgQY7WTDSJv5XSUAPDs25HusVsj1q+mSMbzpqv95p2wGYSvSx6wBPJ4btbCmOtnk92YJh2dNTbWtwdQm2yxskjPCpj8GkEIW1YXS0GF63dyTw+IRHszP5FCLGwrpR385Te50Kf1u2gyFXiUe0J7ts5y6gzISECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAF5SCjCtCUAe8Q+2EGRu4FWMNsBbRVNO+FzjmJFFc6fV+M/BZyROIanXlbBWlthp83dhoNxRf6nrRrjl7FeaaGfVns+vI0IWmfc81XSG2N3q/P5TqTBiGMk4Uxqg+HBc58bCOnjQZi1pTLcc6wKLC3mRKklQmKpmHoWlQE56WvRgD26WDclVc10eQwW+JrrMLZlvew0xSabCibRHghTngQkallOgxVKZE3pCpiqk8c4oKyGSPNyzUKmE53KxYfneXivPDvmkPVy64M1ETpkLlweq4fCcoPR6H5qY4SlCkuDClWF6AjsPZ5B4GxUbUoSmeLS/4dZkgF7zIJbKZxSUUCg==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" SPNameQualifier="https://samltest.id/saml/sp">Eric--Niu@live.com</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_27fad4b4e06b9048884671fe620c83c3" NotOnOrAfter="2021-05-07T04:35:10.129Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T03:30:10.129Z" NotOnOrAfter="2021-05-07T04:35:10.129Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T03:35:10.129Z" SessionIndex="_8a437d7f-814c-468b-b484-f05c4ed5f0d1" SessionNotOnOrAfter="2021-05-07T04:35:10.129Z"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute Name="ATTR" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">test</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2021-05-07 03:35:10 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: extracting issuer from SAML 2.0 protocol message
2021-05-07 03:35:10 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: message from (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz)
2021-05-07 03:35:10 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: searching metadata for message issuer...
2021-05-07 03:35:10 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: recovered request/response correlation value (_27fad4b4e06b9048884671fe620c83c3)
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:35:10 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (_8374a6fa-8f35-43b5-9a90-7f2b81d10964) in context (MessageFlow) with expiration (1620358750)
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32562] [default]: validating signature profile
2021-05-07 03:35:10 DEBUG XMLTooling.KeyInfoResolver.Inline [32562] [default]: resolving ds:X509Certificate
2021-05-07 03:35:10 DEBUG XMLTooling.KeyInfoResolver.Inline [32562] [default]: resolved 1 certificate(s)
2021-05-07 03:35:10 DEBUG XMLTooling.KeyInfoResolver.Inline [32562] [default]: resolved 0 CRL(s)
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32562] [default]: signature verified against message issuer
2021-05-07 03:35:10 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: processing message against SAML 2.0 SSO profile
2021-05-07 03:35:10 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: extracting issuer from SAML 2.0 assertion
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:35:10 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (_a0e60c19-7e59-422d-ac5c-ecddb5a3d98b) in context (MessageFlow) with expiration (1620358750)
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32562] [default]: validating signature profile
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32562] [default]: signature verified against message issuer
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32562] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:35:10 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32562] [default]: assertion satisfied bearer confirmation requirements
2021-05-07 03:35:10 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: SSO profile processing completed successfully
2021-05-07 03:35:10 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: extracting pushed attributes...
2021-05-07 03:35:10 DEBUG Shibboleth.AttributeExtractor.XML [32562] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2021-05-07 03:35:10 DEBUG Shibboleth.AttributeDecoder.String [32562] [default]: decoding SimpleAttribute (mail-nameid) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress)
2021-05-07 03:35:10 DEBUG Shibboleth.AttributeExtractor.XML [32562] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2021-05-07 03:35:10 INFO Shibboleth.AttributeExtractor.XML [32562] [default]: skipping SAML 2.0 Attribute with Name: ATTR, Format:urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified
2021-05-07 03:35:10 DEBUG Shibboleth.AttributeFilter [32562] [default]: filtering 1 attribute(s) from (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz)
2021-05-07 03:35:10 DEBUG Shibboleth.AttributeFilter [32562] [default]: applying filtering rule(s) for attribute (mail-nameid) from (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz)
2021-05-07 03:35:10 DEBUG Shibboleth.SessionCache [32562] [default]: creating new session
2021-05-07 03:35:10 DEBUG Shibboleth.SessionCache [32562] [default]: storing new session...
2021-05-07 03:35:10 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (session) in context (_655ccce3bb69eb3c262590b47ba21395) with expiration (1620362110)
2021-05-07 03:35:10 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (Eric--Niu@live.com) in context (NameID) with expiration (1620362290)
2021-05-07 03:35:10 INFO Shibboleth.SessionCache [32562] [default]: new session created: ID (_655ccce3bb69eb3c262590b47ba21395) IdP (https://portal.sso.ap-northeast-1.amazonaws.com/saml/assertion/NzQ1Mjc0MjIxMzA2X2lucy1kOGI4MzI2YzNlZGY1Yzgz) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.115)
2021-05-07 03:35:10 DEBUG XMLTooling.StorageService [32562] [default]: deleted record (aa16352a41bd17a6abb60c18e2a1b6c57cc75e03d6ddf8ed648456057f7d65a4) in context (RelayState)
2021-05-07 03:35:10 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2021-05-07 03:35:10 DEBUG Shibboleth.Listener [32562]: dispatching message (default::getHeaders::Application)
2021-05-07 03:35:10 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (find::StorageService::SessionCache)
2021-05-07 03:35:10 DEBUG XMLTooling.StorageService [32562] [default]: updated expiration of valid records in context (_655ccce3bb69eb3c262590b47ba21395) to (1620362110)
2021-05-07 03:35:11 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (touch::StorageService::SessionCache)
2021-05-07 03:35:11 DEBUG XMLTooling.StorageService [32562] [default]: updated expiration of valid records in context (_655ccce3bb69eb3c262590b47ba21395) to (1620362111)
2021-05-07 03:36:23 INFO Shibboleth.Listener [32559]: detected socket closure, shutting down worker thread
2021-05-07 03:40:09 DEBUG Shibboleth.Listener [32563] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 03:40:09 DEBUG XMLTooling.StorageService [32563] [default]: inserted record (e12a9c0048c1605eb81832fec8881959c09deea742ba09ccd06c4bd544e0a151) in context (RelayState) with expiration (1620359409)
2021-05-07 03:40:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: validating input
2021-05-07 03:40:09 DEBUG OpenSAML.MessageEncoder.SAML2 [32563] [default]: tracking request (_adc3ca5d605370321c77b1907cc58662) against RelayState token (ss:mem:e12a9c0048c1605eb81832fec8881959c09deea742ba09ccd06c4bd544e0a151)
2021-05-07 03:40:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 03:40:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://shib.ust.hk/idp/profile/SAML2/Redirect/SSO" ID="_adc3ca5d605370321c77b1907cc58662" IssueInstant="2021-05-07T03:40:09Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 03:40:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: message encoded, sending redirect to client
2021-05-07 03:40:24 DEBUG Shibboleth.Listener [32561] [default]: dispatching message (default/SAML2/POST)
2021-05-07 03:40:24 DEBUG OpenSAML.MessageDecoder.SAML2POST [32561] [default]: validating input
2021-05-07 03:40:24 DEBUG OpenSAML.MessageDecoder.SAML2POST [32561] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_c954110422209aef22e03b9fd76f76a3" InResponseTo="_adc3ca5d605370321c77b1907cc58662" IssueInstant="2021-05-07T03:40:23.789Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://shib.ust.hk/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_c954110422209aef22e03b9fd76f76a3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>S3W3bqRG4xGA3pvcXX6uP/IyIbY1zhdqIzg49YPY+fC/9CeOUKGnorjfIILOs5HPxIIIPUBFUZHCQQpzrwo4+g==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>K50VYb4mjIBUZiAk4RjMHIsqy05NocLgFPRiaMefLyXh5xFSv4ykI/X+DPc+4ke45tbANoezlOAdwZA4euiY0r+FELk/1QlPNSnZtHeUbN9uDb+4hilFHCnMhMTqQZPj7S93yfWQyohV1RVy880mh6J1V2bUZmV37tM+T0qgzHuWOXrAJc9TG6yMZA2oHE2bqeQRTYi9ANamYczn6nYP44m4+5WQMhuLwTzTcs8TSb7H2UECkwqnNvlTdMnlT44ry9rBqXjhBHNNRV2qIxg7n1DOA62Bo6lcqqX6IYt2q00jch8pIOnHPDqc2CNE2cIsiraerheSnRwhyAasspK+dQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDFzCCAf+gAwIBAgIUf7SfX1tRvr+9T0GOCfxr//UMVW4wDQYJKoZIhvcNAQELBQAwFjEUMBIG
A1UEAwwLc2hpYi51c3QuaGswHhcNMTUxMTI2MDkzNTQ5WhcNMzUxMTI2MDkzNTQ5WjAWMRQwEgYD
VQQDDAtzaGliLnVzdC5oazCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGfCWI/Obmh
V5rcmyjygKdipsP1Vbe/zZ4fub8TlP5aeauwnIHD4VNeNULJD1qugEsGvGplBtKsljYVaksowqYE
jvrnUWkeAh/W9ieTvcDVMo9sKoA1H12ct3af31atsawrfdTI+kFIQX0NPM0CHzNLvw/IdYoinwe/
1s97FNSG1JB1Oxw2glhFcObVeWRTOffDi/6/rvKgrKvLnyLsbKx6PXZuvZPgFCa8NOAdAlN8+rBf
ZJf99U4tyXbt1JMio5pHtca65bgIyZxbP9Iss1ztS6KgFtAHLlL8xeAW5kEs2MhSVVX2n6n+BPNo
/z6GahEeOIA4p0e7+R2a7O8WPjsCAwEAAaNdMFswHQYDVR0OBBYEFCSrMQ3HFtWHkbrpE2wey+D2
BTjJMDoGA1UdEQQzMDGCC3NoaWIudXN0LmhrhiJodHRwczovL3NoaWIudXN0LmhrL2lkcC9zaGli
Ym9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQALjuMHl9ncv2upHmhP5f/96fCbcurv7uSEGWvTrX0N
E4ZnLUQCpUxDzH+inWuzbl/b2pWKufa0FEo78k+yj+8kRAo1JRPSto1gnHDcjJqjjAgSKxTbX06D
ysU/I9jr2OjEBOnL6QshZoXlkXebOYyYc6anej4xr8Jmv/rASPulzQsuzfxZghlz80oJbD8JXu+h
8edEBxocq006e3iDjTFUovmeasuEG1Jw70sJfBromSggoVS5O9tA8LG0CgEH1zq4xp1TkYTYkBYr
CPTHXJW+aewLO5WDXS4hUVF0F83bWeEDhT7FlS8CZknPKLgjOes1mtcRYdQLhl00ubsquo5c</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_e9cbd5d1877f2896224baed2e29a543d" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_866af2495998651f64d2d64d837c4f39" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3
Mi0zMS0yOC02NC51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDAeFw0xODA4MTgyMzI0MjVaFw0y
ODA4MTUyMzI0MjVaMDUxMzAxBgNVBAMTKmlwLTE3Mi0zMS0yOC02NC51cy13ZXN0LTIuY29tcHV0
ZS5pbnRlcm5hbDCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBANoi7TtbPz5DD5b+pGj2
bWHUWcOm135Dl+kfKWcJV6x4Z4VRMa33nwSfFg6U0DhPaA6rYr8BfcmCIY4V4cGlJkLNsYbgbZNn
rLh23mj7jkaUeyv/DlGtLBcqr0gP6eDtcOf3MMGAkhROcicMj6i+uF6hqLDh4eNcpqEVDVn+ADBs
osIPiAx+RkcyZkfAF3UeGEV5WTSiQw7qYpI7x+c4ViiBzV4waBgXjvNN72Dqlc01AylpmMKaUPfx
IpPC+Ctr0bHu5xn7NxMS8Zt5NDWsP9T15qrpYatW68sXVyE5nJRYpiRiRbo8i7QpUEya+TkXEI8P
VD3KBw9UwhqL8qPPe0T+EeaawF6BVRTEPc+Mn4lGBr4cCFcGk/PLHeyksgPdjNmO1g7y5TWQzu21
WzkXRTWJq7wGwWeW6NrcNqweYPLbXEo0JlmHqunkUs+NsLQAFqSPX02P2xzkA/eOU2o/jN4jAPNp
zqxJouvmiWGXl8Qy4U7vQZ0tGvlTDSltATOQ/QIDAQABo1gwVjA1BgNVHREELjAsgippcC0xNzIt
MzEtMjgtNjQudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWwwHQYDVR0OBBYEFBBtS9YNKSIwViH3
7GJCTxjNBzLAMA0GCSqGSIb3DQEBCwUAA4IBgQDWXcaI7zMnhGsLVTUA6dgzZCa88QkN/Z6n7lCY
2oaKj1neBAWA1Mxg7GBJsmLOrHN8ie0D/uKAF+7NqKCXYqd0PpTX7c1NICL92DvbugG/Ow50j5Dw
6rU4Y8dPS7Y/T1ddbT2F9/5lHCIWP/O2E9HREJ0JAIbu/Mi0CE1qui2aSJMDWKuiGK63M/7fvP51
m6xSJOfZBhmjgllIwEhIzfh4hVPhH0C7iqVls34UyLCZ8IZOCuGPJyTaJN6Pi3Uo1Otkz/1igN5M
pQhVaeYG7SMgha6skTLrVXTt4CuMVsOZ6cG3kHqw8XZoRld+I50iyHqansf5qwzmNoPeXyjGRFQz
V/EH3SUu8eAISTt9pfirwjKsVNHrmMRnQEB/hJYYbTWSsvdS8ghw7a/A0EKQPVaZGCP/hcpt9JMM
b66y2L8VgBbb6aTsR+Uabf6aiMnj1UBMUz9yaMkakKM7e66uHdXUDZ/s8F5rPOGCK+O8O6EsLRf8
XetRWLa1TXRDkJZVPX4=</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2021-05-07 03:40:24 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: extracting issuer from SAML 2.0 protocol message
2021-05-07 03:40:24 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: message from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:40:24 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: searching metadata for message issuer...
2021-05-07 03:40:24 DEBUG OpenSAML.MessageDecoder.SAML2 [32561] [default]: recovered request/response correlation value (_adc3ca5d605370321c77b1907cc58662)
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:40:24 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (_c954110422209aef22e03b9fd76f76a3) in context (MessageFlow) with expiration (1620359063)
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32561] [default]: validating signature profile
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolving ds:X509Certificate
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 1 certificate(s)
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 0 CRL(s)
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolving ds:X509Certificate
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 1 certificate(s)
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 0 CRL(s)
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32561] [default]: signature verified against message issuer
2021-05-07 03:40:24 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: processing message against SAML 2.0 SSO profile
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 0 certificate(s)
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolving ds:X509Certificate
2021-05-07 03:40:24 DEBUG XMLTooling.KeyInfoResolver.Inline [32561] [default]: resolved 1 certificate(s)
2021-05-07 03:40:24 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_12b645eb78f6d3ecf550d92db0c5bce1" IssueInstant="2021-05-07T03:40:23.789Z" Version="2.0"><saml2:Issuer>https://shib.ust.hk/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://shib.ust.hk/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQxyVyfmzZmSMKS//PF68x2aRzHzcWfsRj04Hln6/+6dHRdQMlkQI2rioqGssVRhcAHO+zdqchaDG5GfOUvZYHBJF+Zrg1ZTp/K4RUPSbWIPDG5KFt03eErv/jeC1oMkg==</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="172.17.0.1" InResponseTo="_adc3ca5d605370321c77b1907cc58662" NotOnOrAfter="2021-05-07T03:45:23.846Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T03:40:23.789Z" NotOnOrAfter="2021-05-07T03:45:23.789Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T03:40:21.505Z" SessionIndex="_154162d955295e0eb6b988728408e08a"><saml2:SubjectLocality Address="172.17.0.1"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Unspecified</saml2:AuthnContextClassRef><saml2:AuthenticatingAuthority>https://sts.windows.net/c917f3e2-9322-4926-9bb3-daca730413ca/</saml2:AuthenticatingAuthority></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai@ust.hk</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai@ust.hk</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>Yiu Fai</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2021-05-07 03:40:24 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: extracting issuer from SAML 2.0 assertion
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32561] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:40:24 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (_12b645eb78f6d3ecf550d92db0c5bce1) in context (MessageFlow) with expiration (1620359063)
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32561] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:40:24 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32561] [default]: assertion satisfied bearer confirmation requirements
2021-05-07 03:40:24 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: SSO profile processing completed successfully
2021-05-07 03:40:24 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: extracting pushed attributes...
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeExtractor.XML [32561] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeExtractor.XML [32561] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeExtractor.XML [32561] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeDecoder.String [32561] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeDecoder.String [32561] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeDecoder.Scoped [32561] [default]: decoding ScopedAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeDecoder.String [32561] [default]: decoding SimpleAttribute (givenName) from SAML 2 Attribute (urn:oid:2.5.4.42) with 1 value(s)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeFilter [32561] [default]: filtering 4 attribute(s) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (givenName) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (eppn) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (uid) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:40:24 DEBUG Shibboleth.AttributeFilter [32561] [default]: applying filtering rule(s) for attribute (mail) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:40:24 DEBUG Shibboleth.SessionCache [32561] [default]: creating new session
2021-05-07 03:40:24 DEBUG Shibboleth.SessionCache [32561] [default]: storing new session...
2021-05-07 03:40:24 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (session) in context (_c05aa1794b0005a1271cec7cb30c5ceb) with expiration (1620362424)
2021-05-07 03:40:24 DEBUG XMLTooling.StorageService [32561] [default]: inserted record (AAdzZWNyZXQxyVyfmzZmSMKS//PF68x2aRzHzcWfsRj04Hln6/+6dHRdQMlkQI2rioqGssVRhcAHO+zdqchaDG5GfOUvZYHBJF+Zrg1ZTp/K4RUPSbWIPDG5KFt03eErv/jeC1oMkg==) in context (NameID) with expiration (1620387624)
2021-05-07 03:40:24 INFO Shibboleth.SessionCache [32561] [default]: new session created: ID (_c05aa1794b0005a1271cec7cb30c5ceb) IdP (https://shib.ust.hk/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.46.115)
2021-05-07 03:40:24 DEBUG XMLTooling.StorageService [32561] [default]: deleted record (e12a9c0048c1605eb81832fec8881959c09deea742ba09ccd06c4bd544e0a151) in context (RelayState)
2021-05-07 03:40:24 DEBUG Shibboleth.SSO.SAML2 [32561] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2021-05-07 03:40:24 DEBUG Shibboleth.Listener [32561] [default]: dispatching message (find::StorageService::SessionCache)
2021-05-07 03:40:24 DEBUG XMLTooling.StorageService [32561] [default]: updated expiration of valid records in context (_c05aa1794b0005a1271cec7cb30c5ceb) to (1620362424)
2021-05-07 03:40:25 DEBUG Shibboleth.Listener [32561] [default]: dispatching message (touch::StorageService::SessionCache)
2021-05-07 03:40:25 DEBUG XMLTooling.StorageService [32561] [default]: updated expiration of valid records in context (_c05aa1794b0005a1271cec7cb30c5ceb) to (1620362425)
2021-05-07 03:41:09 INFO XMLTooling.StorageService : purged 7 expired record(s) from storage
2021-05-07 03:43:53 DEBUG Shibboleth.Listener [32563] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 03:43:53 DEBUG XMLTooling.StorageService [32563] [default]: inserted record (0d4926d23c621b875b6cfbf26471370b82d18d8855672f44f2fa4a3c7d5196d6) in context (RelayState) with expiration (1620359633)
2021-05-07 03:43:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: validating input
2021-05-07 03:43:53 DEBUG OpenSAML.MessageEncoder.SAML2 [32563] [default]: tracking request (_3df66004dc25ffbb1e55cb90fce29d6c) against RelayState token (ss:mem:0d4926d23c621b875b6cfbf26471370b82d18d8855672f44f2fa4a3c7d5196d6)
2021-05-07 03:43:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 03:43:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://shib.ust.hk/idp/profile/SAML2/Redirect/SSO" ID="_3df66004dc25ffbb1e55cb90fce29d6c" IssueInstant="2021-05-07T03:43:53Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 03:43:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32563] [default]: message encoded, sending redirect to client
2021-05-07 03:44:07 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (default/SAML2/POST)
2021-05-07 03:44:07 DEBUG OpenSAML.MessageDecoder.SAML2POST [32562] [default]: validating input
2021-05-07 03:44:07 DEBUG OpenSAML.MessageDecoder.SAML2POST [32562] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_77b95e24217e751294988d554fe00106" InResponseTo="_3df66004dc25ffbb1e55cb90fce29d6c" IssueInstant="2021-05-07T03:44:07.651Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://shib.ust.hk/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/><ds:Reference URI="#_77b95e24217e751294988d554fe00106"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/><ds:DigestValue>TVAcm8ObqpMh/fBT1nXGFvLA1mri06L7h06CEStfO3mGYGj4JHI2wD3RiiiqLkYmW1CHaD5Shu2NHMic/X7ylg==</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>qaX75SgQkLPHuUKLE7eovp+gMt5cOr9eEXGjQHuBh8jWpIL15yUiqrTY4HyxAaxjjhrjPf+6fSiUsqJSxgolgeb87AWIFKZzqE3MxMA0iRpWCn4wLLdcn2FMDJ8gj1ULmnrOVPZiLW9gns1daPHJbBAKtZyPc6KMZJY4X2LF3SkbI+wTND6FMFXvfnRyzjOLS64AMySsALgEoAwGL12qT+0Tg8DpDyBcqXa+5azFvTrcvu+zsE6DMNrLJicKMRGZ/ODZQ72dz+cvcVM+AeLUqcUqfN8haZfXkTztYP6iQaNEwbbBMQcA6MaD6jRlcdu2Ic92gWnuMW7hP/k/hS3pfg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDFzCCAf+gAwIBAgIUf7SfX1tRvr+9T0GOCfxr//UMVW4wDQYJKoZIhvcNAQELBQAwFjEUMBIG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_38b411017f95548f95d46f08fb77c757" Type="http://www.w3.org/2001/04/xmlenc#Element"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_5d76d7320f7293974f3131327cd424ee" Recipient="https://samltest.id/saml/sp" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><xenc11:MGF xmlns:xenc11="http://www.w3.org/2009/xmlenc11#" Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha1"/></xenc:EncryptionMethod><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIERTCCAq2gAwIBAgIJAKGA/tV7hXUvMA0GCSqGSIb3DQEBCwUAMDUxMzAxBgNVBAMTKmlwLTE3
Mi0zMS0yOC02NC51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDAeFw0xODA4MTgyMzI0MjVaFw0y
ODA4MTUyMzI0MjVaMDUxMzAxBgNVBAMTKmlwLTE3Mi0zMS0yOC02NC51cy13ZXN0LTIuY29tcHV0
ZS5pbnRlcm5hbDCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBANoi7TtbPz5DD5b+pGj2
bWHUWcOm135Dl+kfKWcJV6x4Z4VRMa33nwSfFg6U0DhPaA6rYr8BfcmCIY4V4cGlJkLNsYbgbZNn
rLh23mj7jkaUeyv/DlGtLBcqr0gP6eDtcOf3MMGAkhROcicMj6i+uF6hqLDh4eNcpqEVDVn+ADBs
osIPiAx+RkcyZkfAF3UeGEV5WTSiQw7qYpI7x+c4ViiBzV4waBgXjvNN72Dqlc01AylpmMKaUPfx
IpPC+Ctr0bHu5xn7NxMS8Zt5NDWsP9T15qrpYatW68sXVyE5nJRYpiRiRbo8i7QpUEya+TkXEI8P
VD3KBw9UwhqL8qPPe0T+EeaawF6BVRTEPc+Mn4lGBr4cCFcGk/PLHeyksgPdjNmO1g7y5TWQzu21
WzkXRTWJq7wGwWeW6NrcNqweYPLbXEo0JlmHqunkUs+NsLQAFqSPX02P2xzkA/eOU2o/jN4jAPNp
zqxJouvmiWGXl8Qy4U7vQZ0tGvlTDSltATOQ/QIDAQABo1gwVjA1BgNVHREELjAsgippcC0xNzIt
MzEtMjgtNjQudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWwwHQYDVR0OBBYEFBBtS9YNKSIwViH3
7GJCTxjNBzLAMA0GCSqGSIb3DQEBCwUAA4IBgQDWXcaI7zMnhGsLVTUA6dgzZCa88QkN/Z6n7lCY
2oaKj1neBAWA1Mxg7GBJsmLOrHN8ie0D/uKAF+7NqKCXYqd0PpTX7c1NICL92DvbugG/Ow50j5Dw
6rU4Y8dPS7Y/T1ddbT2F9/5lHCIWP/O2E9HREJ0JAIbu/Mi0CE1qui2aSJMDWKuiGK63M/7fvP51
m6xSJOfZBhmjgllIwEhIzfh4hVPhH0C7iqVls34UyLCZ8IZOCuGPJyTaJN6Pi3Uo1Otkz/1igN5M
pQhVaeYG7SMgha6skTLrVXTt4CuMVsOZ6cG3kHqw8XZoRld+I50iyHqansf5qwzmNoPeXyjGRFQz
V/EH3SUu8eAISTt9pfirwjKsVNHrmMRnQEB/hJYYbTWSsvdS8ghw7a/A0EKQPVaZGCP/hcpt9JMM
b66y2L8VgBbb6aTsR+Uabf6aiMnj1UBMUz9yaMkakKM7e66uHdXUDZ/s8F5rPOGCK+O8O6EsLRf8
XetRWLa1TXRDkJZVPX4=</ds:X509Certificate></ds:X509Data></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>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</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2021-05-07 03:44:07 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: extracting issuer from SAML 2.0 protocol message
2021-05-07 03:44:07 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: message from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:44:07 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: searching metadata for message issuer...
2021-05-07 03:44:07 DEBUG OpenSAML.MessageDecoder.SAML2 [32562] [default]: recovered request/response correlation value (_3df66004dc25ffbb1e55cb90fce29d6c)
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:44:07 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (_77b95e24217e751294988d554fe00106) in context (MessageFlow) with expiration (1620359287)
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32562] [default]: validating signature profile
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32562] [default]: signature verified against message issuer
2021-05-07 03:44:07 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: processing message against SAML 2.0 SSO profile
2021-05-07 03:44:07 DEBUG XMLTooling.KeyInfoResolver.Inline [32562] [default]: resolved 0 certificate(s)
2021-05-07 03:44:07 DEBUG XMLTooling.KeyInfoResolver.Inline [32562] [default]: resolving ds:X509Certificate
2021-05-07 03:44:07 DEBUG XMLTooling.KeyInfoResolver.Inline [32562] [default]: resolved 1 certificate(s)
2021-05-07 03:44:07 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_c1d81ca14f66980dcbb72b610bab15ed" IssueInstant="2021-05-07T03:44:07.651Z" Version="2.0"><saml2:Issuer>https://shib.ust.hk/idp/shibboleth</saml2:Issuer><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://shib.ust.hk/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">AAdzZWNyZXQxhz41c29O5p1+FrKRQvyqT6oMfyjiZZXPJwfge4UKmBysUBIY58s5moKvPKGdslB9sV6NqxgRc7gzoPvbWyiimEpSBq7yTENhPZBO3YbaIxIddCWY+yxTo7OvCjqh1A==</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="172.17.0.1" InResponseTo="_3df66004dc25ffbb1e55cb90fce29d6c" NotOnOrAfter="2021-05-07T03:49:07.660Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T03:44:07.651Z" NotOnOrAfter="2021-05-07T03:49:07.651Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T03:44:02.680Z" SessionIndex="_1a3ac155d6cccb0b72009bc7c4a535e1"><saml2:SubjectLocality Address="172.17.0.1"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Unspecified</saml2:AuthnContextClassRef><saml2:AuthenticatingAuthority>https://sts.windows.net/c917f3e2-9322-4926-9bb3-daca730413ca/</saml2:AuthenticatingAuthority></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai@ust.hk</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>ccyflai@ust.hk</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue>Yiu Fai</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion>
2021-05-07 03:44:07 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: extracting issuer from SAML 2.0 assertion
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32562] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:44:07 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (_c1d81ca14f66980dcbb72b610bab15ed) in context (MessageFlow) with expiration (1620359287)
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32562] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 03:44:07 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32562] [default]: assertion satisfied bearer confirmation requirements
2021-05-07 03:44:07 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: SSO profile processing completed successfully
2021-05-07 03:44:07 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: extracting pushed attributes...
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeExtractor.XML [32562] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeExtractor.XML [32562] [default]: skipping NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeExtractor.XML [32562] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeDecoder.String [32562] [default]: decoding SimpleAttribute (mail) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.3) with 1 value(s)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeDecoder.String [32562] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeDecoder.Scoped [32562] [default]: decoding ScopedAttribute (eppn) from SAML 2 Attribute (urn:oid:1.3.6.1.4.1.5923.1.1.1.6) with 1 value(s)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeDecoder.String [32562] [default]: decoding SimpleAttribute (givenName) from SAML 2 Attribute (urn:oid:2.5.4.42) with 1 value(s)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeFilter [32562] [default]: filtering 4 attribute(s) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeFilter [32562] [default]: applying filtering rule(s) for attribute (givenName) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeFilter [32562] [default]: applying filtering rule(s) for attribute (eppn) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeFilter [32562] [default]: applying filtering rule(s) for attribute (uid) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:44:07 DEBUG Shibboleth.AttributeFilter [32562] [default]: applying filtering rule(s) for attribute (mail) from (https://shib.ust.hk/idp/shibboleth)
2021-05-07 03:44:07 DEBUG Shibboleth.SessionCache [32562] [default]: creating new session
2021-05-07 03:44:07 DEBUG Shibboleth.SessionCache [32562] [default]: storing new session...
2021-05-07 03:44:07 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (session) in context (_a3c87770306c964c89f1255ff57e3da4) with expiration (1620362647)
2021-05-07 03:44:07 DEBUG XMLTooling.StorageService [32562] [default]: inserted record (AAdzZWNyZXQxhz41c29O5p1+FrKRQvyqT6oMfyjiZZXPJwfge4UKmBysUBIY58s5moKvPKGdslB9sV6NqxgRc7gzoPvbWyiimEpSBq7yTENhPZBO3YbaIxIddCWY+yxTo7OvCjqh1A==) in context (NameID) with expiration (1620387847)
2021-05-07 03:44:07 INFO Shibboleth.SessionCache [32562] [default]: new session created: ID (_a3c87770306c964c89f1255ff57e3da4) IdP (https://shib.ust.hk/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.27.23)
2021-05-07 03:44:07 DEBUG XMLTooling.StorageService [32562] [default]: deleted record (0d4926d23c621b875b6cfbf26471370b82d18d8855672f44f2fa4a3c7d5196d6) in context (RelayState)
2021-05-07 03:44:07 DEBUG Shibboleth.SSO.SAML2 [32562] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2021-05-07 03:44:08 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (find::StorageService::SessionCache)
2021-05-07 03:44:08 DEBUG XMLTooling.StorageService [32562] [default]: updated expiration of valid records in context (_a3c87770306c964c89f1255ff57e3da4) to (1620362648)
2021-05-07 03:44:08 DEBUG Shibboleth.Listener [32562] [default]: dispatching message (touch::StorageService::SessionCache)
2021-05-07 03:44:08 DEBUG XMLTooling.StorageService [32562] [default]: updated expiration of valid records in context (_a3c87770306c964c89f1255ff57e3da4) to (1620362648)
2021-05-07 03:44:44 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2021-05-07 03:56:08 INFO XMLTooling.StorageService : purged 9 expired record(s) from storage
2021-05-07 04:01:58 INFO Shibboleth.Listener [32563]: detected socket closure, shutting down worker thread
2021-05-07 04:02:28 INFO Shibboleth.Listener [32561]: detected socket closure, shutting down worker thread
2021-05-07 04:02:42 INFO Shibboleth.Listener [32562]: detected socket closure, shutting down worker thread
2021-05-07 04:14:43 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2021-05-07 04:41:08 INFO XMLTooling.StorageService : purged 4 expired record(s) from storage
2021-05-07 04:44:42 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2021-05-07 04:56:08 INFO XMLTooling.StorageService : purged 3 expired record(s) from storage
2021-05-07 05:11:07 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2021-05-07 05:14:41 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2021-05-07 05:43:38 DEBUG Shibboleth.Listener [32564] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:43:38 INFO OpenSAML.MetadataProvider.Dynamic [32564] [default]: resolving metadata for (Access2.groupfcc.com)
2021-05-07 05:43:38 ERROR OpenSAML.MetadataProvider.Dynamic [32564] [default]: error while resolving (Access2.groupfcc.com): Unable to access local file (/home/mdupload/0591757249d8a66023429bbe5380954658e4f46f.xml)
2021-05-07 05:43:38 WARN Shibboleth.SessionInitiator.SAML2 [32564] [default]: unable to locate metadata for provider (Access2.groupfcc.com)
2021-05-07 05:44:39 DEBUG Shibboleth.Listener [32565] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:44:39 INFO OpenSAML.MetadataProvider.Dynamic [32565] [default]: resolving metadata for (Access2.groupfcc.com)
2021-05-07 05:44:39 ERROR OpenSAML.MetadataProvider.Dynamic [32565] [default]: error while resolving (Access2.groupfcc.com): Unable to access local file (/home/mdupload/0591757249d8a66023429bbe5380954658e4f46f.xml)
2021-05-07 05:44:39 WARN Shibboleth.SessionInitiator.SAML2 [32565] [default]: unable to locate metadata for provider (Access2.groupfcc.com)
2021-05-07 05:44:40 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2021-05-07 05:45:06 DEBUG Shibboleth.Listener [32566] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:45:06 INFO OpenSAML.MetadataProvider.Dynamic [32566] [default]: resolving metadata for (Https://access2.groupfcc.com)
2021-05-07 05:45:06 ERROR OpenSAML.MetadataProvider.Dynamic [32566] [default]: error while resolving (Https://access2.groupfcc.com): Unable to access local file (/home/mdupload/f58ef188acd85d201c5e5e7d8d10c52b383d07b6.xml)
2021-05-07 05:45:06 WARN Shibboleth.SessionInitiator.SAML2 [32566] [default]: unable to locate metadata for provider (Https://access2.groupfcc.com)
2021-05-07 05:45:30 DEBUG Shibboleth.Listener [32564] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:45:30 INFO OpenSAML.MetadataProvider.Dynamic [32564] [default]: resolving metadata for (Https://access2-test.groupfcc.com)
2021-05-07 05:45:30 ERROR OpenSAML.MetadataProvider.Dynamic [32564] [default]: error while resolving (Https://access2-test.groupfcc.com): Unable to access local file (/home/mdupload/c37fd4e859f51762d938d7b62d69e8429d3756a2.xml)
2021-05-07 05:45:30 WARN Shibboleth.SessionInitiator.SAML2 [32564] [default]: unable to locate metadata for provider (Https://access2-test.groupfcc.com)
2021-05-07 05:46:25 DEBUG Shibboleth.Listener [32565] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:46:25 INFO OpenSAML.MetadataProvider.Dynamic [32565] [default]: resolving metadata for (Https://access2.groupfcc.com)
2021-05-07 05:46:25 ERROR OpenSAML.MetadataProvider.Dynamic [32565] [default]: error while resolving (Https://access2.groupfcc.com): Unable to access local file (/home/mdupload/f58ef188acd85d201c5e5e7d8d10c52b383d07b6.xml)
2021-05-07 05:46:25 WARN Shibboleth.SessionInitiator.SAML2 [32565] [default]: unable to locate metadata for provider (Https://access2.groupfcc.com)
2021-05-07 05:49:38 INFO Shibboleth.Listener [32565]: detected socket closure, shutting down worker thread
2021-05-07 05:53:14 INFO Shibboleth.Listener [32564]: detected socket closure, shutting down worker thread
2021-05-07 05:53:25 INFO Shibboleth.Listener [32566]: detected socket closure, shutting down worker thread
2021-05-07 05:55:52 DEBUG Shibboleth.Listener [32567] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:55:52 INFO OpenSAML.MetadataProvider.Dynamic [32567] [default]: resolving metadata for (Access2.groupfcc.com)
2021-05-07 05:55:52 ERROR OpenSAML.MetadataProvider.Dynamic [32567] [default]: error while resolving (Access2.groupfcc.com): Unable to access local file (/home/mdupload/0591757249d8a66023429bbe5380954658e4f46f.xml)
2021-05-07 05:55:52 WARN Shibboleth.SessionInitiator.SAML2 [32567] [default]: unable to locate metadata for provider (Access2.groupfcc.com)
2021-05-07 05:57:10 DEBUG Shibboleth.Listener [32568] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:57:10 INFO OpenSAML.MetadataProvider.Dynamic [32568] [default]: resolving metadata for (https://access2-test.groupfcc.com)
2021-05-07 05:57:10 ERROR OpenSAML.MetadataProvider.Dynamic [32568] [default]: error while resolving (https://access2-test.groupfcc.com): Unable to access local file (/home/mdupload/03feede053578d7317189c42bc248ac5ae93f680.xml)
2021-05-07 05:57:10 WARN Shibboleth.SessionInitiator.SAML2 [32568] [default]: unable to locate metadata for provider (https://access2-test.groupfcc.com)
2021-05-07 05:57:30 DEBUG Shibboleth.Listener [32568] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:57:30 INFO OpenSAML.MetadataProvider.Dynamic [32568] [default]: resolving metadata for (https://access2-test.groupfcc.com)
2021-05-07 05:57:30 ERROR OpenSAML.MetadataProvider.Dynamic [32568] [default]: error while resolving (https://access2-test.groupfcc.com): Unable to access local file (/home/mdupload/03feede053578d7317189c42bc248ac5ae93f680.xml)
2021-05-07 05:57:30 WARN Shibboleth.SessionInitiator.SAML2 [32568] [default]: unable to locate metadata for provider (https://access2-test.groupfcc.com)
2021-05-07 05:57:33 DEBUG Shibboleth.Listener [32569] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 05:57:33 INFO OpenSAML.MetadataProvider.Dynamic [32569] [default]: resolving metadata for (https://access2-test.groupfcc.com)
2021-05-07 05:57:33 ERROR OpenSAML.MetadataProvider.Dynamic [32569] [default]: error while resolving (https://access2-test.groupfcc.com): Unable to access local file (/home/mdupload/03feede053578d7317189c42bc248ac5ae93f680.xml)
2021-05-07 05:57:33 WARN Shibboleth.SessionInitiator.SAML2 [32569] [default]: unable to locate metadata for provider (https://access2-test.groupfcc.com)
2021-05-07 05:59:03 INFO Shibboleth.Listener [32567]: detected socket closure, shutting down worker thread
2021-05-07 05:59:04 INFO Shibboleth.Listener [32568]: detected socket closure, shutting down worker thread
2021-05-07 06:00:39 DEBUG Shibboleth.Listener [32569] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 06:00:39 INFO OpenSAML.MetadataProvider.Dynamic [32569] [default]: resolving metadata for (https://access2,groupfcc,com)
2021-05-07 06:00:39 ERROR OpenSAML.MetadataProvider.Dynamic [32569] [default]: error while resolving (https://access2,groupfcc,com): Unable to access local file (/home/mdupload/fb48d059095d0f3785ada215ebccf39627bbd543.xml)
2021-05-07 06:00:39 WARN Shibboleth.SessionInitiator.SAML2 [32569] [default]: unable to locate metadata for provider (https://access2,groupfcc,com)
2021-05-07 06:01:17 DEBUG Shibboleth.Listener [32570] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 06:01:17 INFO OpenSAML.MetadataProvider.Dynamic [32570] [default]: resolving metadata for (https://access2-test.groupfcc,com)
2021-05-07 06:01:17 ERROR OpenSAML.MetadataProvider.Dynamic [32570] [default]: error while resolving (https://access2-test.groupfcc,com): Unable to access local file (/home/mdupload/eaff6d5bc9b1f46d809e61b41b280f528ed2b891.xml)
2021-05-07 06:01:17 WARN Shibboleth.SessionInitiator.SAML2 [32570] [default]: unable to locate metadata for provider (https://access2-test.groupfcc,com)
2021-05-07 06:01:42 INFO Shibboleth.Listener [32570]: detected socket closure, shutting down worker thread
2021-05-07 06:04:01 DEBUG Shibboleth.Listener [32571] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 06:04:01 INFO OpenSAML.MetadataProvider.Dynamic [32571] [default]: resolving metadata for (access2.groupfcc.com)
2021-05-07 06:04:01 INFO OpenSAML.MetadataProvider.Dynamic [32571] [default]: caching resolved metadata for (access2.groupfcc.com)
2021-05-07 06:04:01 INFO OpenSAML.MetadataProvider.Dynamic [32571] [default]: next refresh of metadata for (access2.groupfcc.com) no sooner than 28800 seconds
2021-05-07 06:04:01 DEBUG XMLTooling.StorageService [32571] [default]: inserted record (901ae8663c9dda2432f1fbe814504db8bab874ff2cc487408ef2c972817b74f8) in context (RelayState) with expiration (1620368041)
2021-05-07 06:04:01 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32571] [default]: validating input
2021-05-07 06:04:01 DEBUG OpenSAML.MessageEncoder.SAML2 [32571] [default]: tracking request (_29498ab2365690a94725e924a2c4cba7) against RelayState token (ss:mem:901ae8663c9dda2432f1fbe814504db8bab874ff2cc487408ef2c972817b74f8)
2021-05-07 06:04:01 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32571] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 06:04:01 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32571] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://access2.groupfcc.com:443/profile/SAML2/Redirect/SSO" ID="_29498ab2365690a94725e924a2c4cba7" IssueInstant="2021-05-07T06:04:01Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 06:04:01 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32571] [default]: message encoded, sending redirect to client
2021-05-07 06:04:05 DEBUG Shibboleth.Listener [32569] [default]: dispatching message (default/SAML2/POST)
2021-05-07 06:04:05 DEBUG OpenSAML.MessageDecoder.SAML2POST [32569] [default]: validating input
2021-05-07 06:04:05 DEBUG OpenSAML.MessageDecoder.SAML2POST [32569] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_747e715a9db74bb5e407811d2a7035a8" InResponseTo="_29498ab2365690a94725e924a2c4cba7" IssueInstant="2021-05-07T06:04:04.804Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">access2.groupfcc.com</saml2:Issuer><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_78a2de02927d53d51380e5bba595a16f" IssueInstant="2021-05-07T06:04:04.804Z" Version="2.0" xmlns:xs="http://www.w3.org/2001/XMLSchema"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">access2.groupfcc.com</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference URI="#_78a2de02927d53d51380e5bba595a16f"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xs"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>EY7QXQKXuC9eLLLhpj2HhLEF8VU=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>V1CK/0OsByqR6syqIRIwuEXYRZWvOQ4GS+X4XiwxwNrPd/Yx92JFeqNx39yPmDCih3ddjEB5SHGK8Lbqj0v+3Fm2F1vF5tJeZhKlUvQDZut/DfA0gV8UqTduJE76Utr+sCWCX4jF6BYmMMtAhVr0G8WyGDCSrJvLlq6KHyYBznLaFMwWtg/qDzmzBLjKlC2PAoD25nTkUn59t4Qk1o1gejDGhtmXLAiDbZL2NkHt6WYdofsGtndP4rYa5ENPDgQIKg3ugvtp/W2PqWFOUE5iHrR7P8vy+oXUwvPAe9tFm6gAQx0UVHhzCWXrY0dYL2+V0AsiJ+3gKQ2rJApF+me6Nw==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIGsDCCBZigAwIBAgIQBoqVsidNr+jtWb3hJBNBkTANBgkqhkiG9w0BAQsFADBNMQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="access2.groupfcc.com" SPNameQualifier="https://samltest.id/saml/sp">TORRESL331</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.5.193.84" InResponseTo="_29498ab2365690a94725e924a2c4cba7" NotOnOrAfter="2021-05-07T06:09:04.804Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T06:04:04.804Z" NotOnOrAfter="2021-05-07T06:09:04.804Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T06:04:01.682Z" SessionIndex="_57718a03ecfbf8ebc31b3e1a8649da13"><saml2:SubjectLocality Address="10.5.193.84"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="lastName" Name="lastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">TORRES</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="GivenName" Name="GivenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">LUIS</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">TORRESL331</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="LDN" Name="LDN" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">02251152G</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="business" Name="business" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">SSCC</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="groups" Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">liferay_intranet_access,AN_CORP_SECRETARIA</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="WorkPlaceId" Name="WorkPlaceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">00000157</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2021-05-07 06:04:05 DEBUG OpenSAML.MessageDecoder.SAML2 [32569] [default]: extracting issuer from SAML 2.0 protocol message
2021-05-07 06:04:05 DEBUG OpenSAML.MessageDecoder.SAML2 [32569] [default]: message from (access2.groupfcc.com)
2021-05-07 06:04:05 DEBUG OpenSAML.MessageDecoder.SAML2 [32569] [default]: searching metadata for message issuer...
2021-05-07 06:04:05 DEBUG OpenSAML.MessageDecoder.SAML2 [32569] [default]: recovered request/response correlation value (_29498ab2365690a94725e924a2c4cba7)
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32569] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32569] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 06:04:05 DEBUG XMLTooling.StorageService [32569] [default]: inserted record (_747e715a9db74bb5e407811d2a7035a8) in context (MessageFlow) with expiration (1620367684)
2021-05-07 06:04:05 DEBUG Shibboleth.SSO.SAML2 [32569] [default]: processing message against SAML 2.0 SSO profile
2021-05-07 06:04:05 DEBUG Shibboleth.SSO.SAML2 [32569] [default]: extracting issuer from SAML 2.0 assertion
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32569] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32569] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 06:04:05 DEBUG XMLTooling.StorageService [32569] [default]: inserted record (_78a2de02927d53d51380e5bba595a16f) in context (MessageFlow) with expiration (1620367684)
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32569] [default]: validating signature profile
2021-05-07 06:04:05 DEBUG XMLTooling.KeyInfoResolver.Inline [32569] [default]: resolving ds:X509Certificate
2021-05-07 06:04:05 DEBUG XMLTooling.KeyInfoResolver.Inline [32569] [default]: resolved 1 certificate(s)
2021-05-07 06:04:05 DEBUG XMLTooling.KeyInfoResolver.Inline [32569] [default]: resolved 0 CRL(s)
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32569] [default]: signature verified against message issuer
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32569] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 06:04:05 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32569] [default]: assertion satisfied bearer confirmation requirements
2021-05-07 06:04:05 DEBUG Shibboleth.SSO.SAML2 [32569] [default]: SSO profile processing completed successfully
2021-05-07 06:04:05 DEBUG Shibboleth.SSO.SAML2 [32569] [default]: extracting pushed attributes...
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeExtractor.XML [32569] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeDecoder.NameID [32569] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeExtractor.XML [32569] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2021-05-07 06:04:05 INFO Shibboleth.AttributeExtractor.XML [32569] [default]: skipping SAML 2.0 Attribute with Name: lastName
2021-05-07 06:04:05 INFO Shibboleth.AttributeExtractor.XML [32569] [default]: skipping SAML 2.0 Attribute with Name: GivenName
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeDecoder.String [32569] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2021-05-07 06:04:05 INFO Shibboleth.AttributeExtractor.XML [32569] [default]: skipping SAML 2.0 Attribute with Name: LDN
2021-05-07 06:04:05 INFO Shibboleth.AttributeExtractor.XML [32569] [default]: skipping SAML 2.0 Attribute with Name: business
2021-05-07 06:04:05 INFO Shibboleth.AttributeExtractor.XML [32569] [default]: skipping SAML 2.0 Attribute with Name: groups
2021-05-07 06:04:05 INFO Shibboleth.AttributeExtractor.XML [32569] [default]: skipping SAML 2.0 Attribute with Name: WorkPlaceId
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeFilter [32569] [default]: filtering 2 attribute(s) from (access2.groupfcc.com)
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeFilter [32569] [default]: applying filtering rule(s) for attribute (persistent-id) from (access2.groupfcc.com)
2021-05-07 06:04:05 DEBUG Shibboleth.AttributeFilter [32569] [default]: applying filtering rule(s) for attribute (uid) from (access2.groupfcc.com)
2021-05-07 06:04:05 DEBUG Shibboleth.SessionCache [32569] [default]: creating new session
2021-05-07 06:04:05 DEBUG Shibboleth.SessionCache [32569] [default]: storing new session...
2021-05-07 06:04:05 DEBUG XMLTooling.StorageService [32569] [default]: inserted record (session) in context (_02b740792296fc51f99b6b59864e1ca3) with expiration (1620371045)
2021-05-07 06:04:05 DEBUG XMLTooling.StorageService [32569] [default]: inserted record (TORRESL331) in context (NameID) with expiration (1620396245)
2021-05-07 06:04:05 INFO Shibboleth.SessionCache [32569] [default]: new session created: ID (_02b740792296fc51f99b6b59864e1ca3) IdP (access2.groupfcc.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.9.115)
2021-05-07 06:04:05 DEBUG XMLTooling.StorageService [32569] [default]: deleted record (901ae8663c9dda2432f1fbe814504db8bab874ff2cc487408ef2c972817b74f8) in context (RelayState)
2021-05-07 06:04:05 DEBUG Shibboleth.SSO.SAML2 [32569] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2021-05-07 06:04:05 DEBUG Shibboleth.Listener [32569]: dispatching message (default::getHeaders::Application)
2021-05-07 06:04:05 DEBUG Shibboleth.Listener [32569] [default]: dispatching message (find::StorageService::SessionCache)
2021-05-07 06:04:05 DEBUG XMLTooling.StorageService [32569] [default]: updated expiration of valid records in context (_02b740792296fc51f99b6b59864e1ca3) to (1620371045)
2021-05-07 06:04:06 DEBUG Shibboleth.Listener [32569] [default]: dispatching message (touch::StorageService::SessionCache)
2021-05-07 06:04:06 DEBUG XMLTooling.StorageService [32569] [default]: updated expiration of valid records in context (_02b740792296fc51f99b6b59864e1ca3) to (1620371046)
2021-05-07 06:04:55 DEBUG Shibboleth.Listener [32572] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 06:04:55 DEBUG XMLTooling.StorageService [32572] [default]: inserted record (5d2245b39eeb9be33fdd840b2ce65af8b497f683707345e7ced8ae7a0f7c4ba9) in context (RelayState) with expiration (1620368095)
2021-05-07 06:04:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32572] [default]: validating input
2021-05-07 06:04:55 DEBUG OpenSAML.MessageEncoder.SAML2 [32572] [default]: tracking request (_6e532134d7f4d3138a25925fd987694c) against RelayState token (ss:mem:5d2245b39eeb9be33fdd840b2ce65af8b497f683707345e7ced8ae7a0f7c4ba9)
2021-05-07 06:04:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32572] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 06:04:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32572] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://access2.groupfcc.com:443/profile/SAML2/Redirect/SSO" ID="_6e532134d7f4d3138a25925fd987694c" IssueInstant="2021-05-07T06:04:55Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 06:04:55 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32572] [default]: message encoded, sending redirect to client
2021-05-07 06:05:56 DEBUG Shibboleth.Listener [32573] [default]: dispatching message (default/SAML2/POST)
2021-05-07 06:05:56 DEBUG OpenSAML.MessageDecoder.SAML2POST [32573] [default]: validating input
2021-05-07 06:05:56 DEBUG OpenSAML.MessageDecoder.SAML2POST [32573] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_be126a3ad044cb16ffe8a9d74bc3e417" InResponseTo="_6e532134d7f4d3138a25925fd987694c" IssueInstant="2021-05-07T06:05:54.115Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">access2.groupfcc.com</saml2:Issuer><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_69d4b8a6f6c328eef95406032d417138" IssueInstant="2021-05-07T06:05:54.115Z" Version="2.0" xmlns:xs="http://www.w3.org/2001/XMLSchema"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">access2.groupfcc.com</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference URI="#_69d4b8a6f6c328eef95406032d417138"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xs"/></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ziUNwNjzH61OygtL25eUA+3Tbto=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>hPFqe4WLmimtAc2OpNDZibt/aXHgg1wXV87njWNo9C0aeJa1YyA35vCH5O14Ly355SyEjDiBzwtTAkDoO/o2t3kF1wjn1R2JbfE22HwyXtKVbiCBU8Z2ggBPwyiktGxLyJN0mra3asWqcvszGiAj/vFKBZW3fHXaOmWh4+mg9QrYX8klwxm9ZvB3nLDPHIcQ7mtU760IAFPFxES1n/Jn/kQL+rhyZLpiliy3xjhDGlyxvjoKie2QRzQfonlDv0rtqv7jLZxaoYVxxtpDubkPWv5WYDFRO2M2r4bzZGj4UXxJJtOCEM1Q7r7N4ABj7Mdu5mv4qpJ8KxQcyr+2Sm22LQ==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIGsDCCBZigAwIBAgIQBoqVsidNr+jtWb3hJBNBkTANBgkqhkiG9w0BAQsFADBNMQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" NameQualifier="access2.groupfcc.com" SPNameQualifier="https://samltest.id/saml/sp">TORRESL331</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.5.193.84" InResponseTo="_6e532134d7f4d3138a25925fd987694c" NotOnOrAfter="2021-05-07T06:10:54.115Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2021-05-07T06:05:54.115Z" NotOnOrAfter="2021-05-07T06:10:54.115Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2021-05-07T06:05:51.750Z" SessionIndex="_6bc164ac1e8a01ada88f1f6324aa3f36"><saml2:SubjectLocality Address="10.5.193.84"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="lastName" Name="lastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">TORRES</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="GivenName" Name="GivenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">LUIS</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">TORRESL331</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="LDN" Name="LDN" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">02251152G</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="business" Name="business" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">SSCC</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="groups" Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">liferay_intranet_access,AN_CORP_SECRETARIA</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="WorkPlaceId" Name="WorkPlaceId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">00000157</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2021-05-07 06:05:56 DEBUG OpenSAML.MessageDecoder.SAML2 [32573] [default]: extracting issuer from SAML 2.0 protocol message
2021-05-07 06:05:56 DEBUG OpenSAML.MessageDecoder.SAML2 [32573] [default]: message from (access2.groupfcc.com)
2021-05-07 06:05:56 DEBUG OpenSAML.MessageDecoder.SAML2 [32573] [default]: searching metadata for message issuer...
2021-05-07 06:05:56 DEBUG OpenSAML.MessageDecoder.SAML2 [32573] [default]: recovered request/response correlation value (_6e532134d7f4d3138a25925fd987694c)
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32573] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32573] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: inserted record (_be126a3ad044cb16ffe8a9d74bc3e417) in context (MessageFlow) with expiration (1620367794)
2021-05-07 06:05:56 DEBUG Shibboleth.SSO.SAML2 [32573] [default]: processing message against SAML 2.0 SSO profile
2021-05-07 06:05:56 DEBUG Shibboleth.SSO.SAML2 [32573] [default]: extracting issuer from SAML 2.0 assertion
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32573] [default]: evaluating message flow policy (correlation off, replay checking on, expiration 60)
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [32573] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: inserted record (_69d4b8a6f6c328eef95406032d417138) in context (MessageFlow) with expiration (1620367794)
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32573] [default]: validating signature profile
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [32573] [default]: signature verified against message issuer
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32573] [default]: ignoring InResponseTo, correlation checking is disabled
2021-05-07 06:05:56 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [32573] [default]: assertion satisfied bearer confirmation requirements
2021-05-07 06:05:56 DEBUG Shibboleth.SSO.SAML2 [32573] [default]: SSO profile processing completed successfully
2021-05-07 06:05:56 DEBUG Shibboleth.SSO.SAML2 [32573] [default]: extracting pushed attributes...
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeExtractor.XML [32573] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeDecoder.NameID [32573] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeExtractor.XML [32573] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2021-05-07 06:05:56 INFO Shibboleth.AttributeExtractor.XML [32573] [default]: skipping SAML 2.0 Attribute with Name: lastName
2021-05-07 06:05:56 INFO Shibboleth.AttributeExtractor.XML [32573] [default]: skipping SAML 2.0 Attribute with Name: GivenName
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeDecoder.String [32573] [default]: decoding SimpleAttribute (uid) from SAML 2 Attribute (urn:oid:0.9.2342.19200300.100.1.1) with 1 value(s)
2021-05-07 06:05:56 INFO Shibboleth.AttributeExtractor.XML [32573] [default]: skipping SAML 2.0 Attribute with Name: LDN
2021-05-07 06:05:56 INFO Shibboleth.AttributeExtractor.XML [32573] [default]: skipping SAML 2.0 Attribute with Name: business
2021-05-07 06:05:56 INFO Shibboleth.AttributeExtractor.XML [32573] [default]: skipping SAML 2.0 Attribute with Name: groups
2021-05-07 06:05:56 INFO Shibboleth.AttributeExtractor.XML [32573] [default]: skipping SAML 2.0 Attribute with Name: WorkPlaceId
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeFilter [32573] [default]: filtering 2 attribute(s) from (access2.groupfcc.com)
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeFilter [32573] [default]: applying filtering rule(s) for attribute (persistent-id) from (access2.groupfcc.com)
2021-05-07 06:05:56 DEBUG Shibboleth.AttributeFilter [32573] [default]: applying filtering rule(s) for attribute (uid) from (access2.groupfcc.com)
2021-05-07 06:05:56 DEBUG Shibboleth.SessionCache [32573] [default]: creating new session
2021-05-07 06:05:56 DEBUG Shibboleth.SessionCache [32573] [default]: storing new session...
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: inserted record (session) in context (_54ac4483ce390142c2aaf2c2b061ce25) with expiration (1620371156)
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: updated record (TORRESL331) in context (NameID) with expiration (1620396356)
2021-05-07 06:05:56 INFO Shibboleth.SessionCache [32573] [default]: new session created: ID (_54ac4483ce390142c2aaf2c2b061ce25) IdP (access2.groupfcc.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.9.115)
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: deleted record (5d2245b39eeb9be33fdd840b2ce65af8b497f683707345e7ced8ae7a0f7c4ba9) in context (RelayState)
2021-05-07 06:05:56 DEBUG Shibboleth.SSO.SAML2 [32573] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2021-05-07 06:05:56 DEBUG Shibboleth.Listener [32573]: dispatching message (default::getHeaders::Application)
2021-05-07 06:05:56 DEBUG Shibboleth.Listener [32573] [default]: dispatching message (find::StorageService::SessionCache)
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: updated expiration of valid records in context (_54ac4483ce390142c2aaf2c2b061ce25) to (1620371156)
2021-05-07 06:05:56 DEBUG Shibboleth.Listener [32573] [default]: dispatching message (touch::StorageService::SessionCache)
2021-05-07 06:05:56 DEBUG XMLTooling.StorageService [32573] [default]: updated expiration of valid records in context (_54ac4483ce390142c2aaf2c2b061ce25) to (1620371156)
2021-05-07 06:06:14 INFO Shibboleth.Listener [32572]: detected socket closure, shutting down worker thread
2021-05-07 06:06:46 DEBUG Shibboleth.Listener [32574] [default]: dispatching message (default/Login::run::SAML2SI)
2021-05-07 06:06:46 DEBUG XMLTooling.StorageService [32574] [default]: inserted record (dd5b784744ed353a1bfaf2dd589d0a296fcdbf5e39a62f259cfc815da34055a3) in context (RelayState) with expiration (1620368206)
2021-05-07 06:06:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32574] [default]: validating input
2021-05-07 06:06:46 DEBUG OpenSAML.MessageEncoder.SAML2 [32574] [default]: tracking request (_4e2ca0137745c834a5d9511818399c2e) against RelayState token (ss:mem:dd5b784744ed353a1bfaf2dd589d0a296fcdbf5e39a62f259cfc815da34055a3)
2021-05-07 06:06:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32574] [default]: marshalling, deflating, base64-encoding the message
2021-05-07 06:06:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32574] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://access2.groupfcc.com:443/profile/SAML2/Redirect/SSO" ID="_4e2ca0137745c834a5d9511818399c2e" IssueInstant="2021-05-07T06:06:46Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2021-05-07 06:06:46 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [32574] [default]: message encoded, sending redirect to client
2021-05-07 06:06:50 INFO Shibboleth.Listener [32571]: detected socket closure, shutting down worker thread
2021-05-07 06:06:53 INFO Shibboleth.Listener [32573]: detected socket closure, shutting down worker thread