2019-08-23 14:28:38 DEBUG OpenSAML.MessageDecoder.SAML2 [1220] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 14:28:38 DEBUG OpenSAML.MessageDecoder.SAML2 [1220] [default]: message from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:28:38 DEBUG OpenSAML.MessageDecoder.SAML2 [1220] [default]: searching metadata for message issuer...
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1220] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 14:28:38 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (_bd3ca463a70db33b6977f9a08facdb5d) in context (MessageFlow) with expiration (1566570757)
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: validating signature profile
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: signature verified against message issuer
2019-08-23 14:28:38 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 14:28:38 DEBUG XMLTooling.KeyInfoResolver.Inline [1220] [default]: resolved 0 certificate(s)
2019-08-23 14:28:38 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_2c8db72356efbc7c7d6eef6b98ae29f5" IssueInstant="2019-08-23T14:28:37.937Z" Version="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_2c8db72356efbc7c7d6eef6b98ae29f5">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xsd"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>UK/i45GB0S3MTQr/GlsMMLjJs+3bEu8hN0fcbYHxgPw=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
gxvQMgZ9sOfVTpJCPW2ZNjzjCoKTMyihbJwPmx465b6QR45GyOV3s/oGh5iBh099BEDOmFS3dvSh&#xD;
SHR7m0s1qLP0GDju4i0Bo9NiV9AYOuqp/ePvNxq/mVrwEWEPzpT+Fx3y7suW4P7OZvD2b7m+R/mD&#xD;
HHrtpaPfE0KzzGFKB9QtIvMTIIY5RLQY0hSX1B4axKRlfm8Ip6zcdhRb4o9ru1WCqGeZY3pDfuvY&#xD;
gYcdByM9D2BmIEwefKV+VKzcCkRl39eRjq67nZhmP39gqP6/HFA/CsOKEpPxBBq+hFrdRhlQk3Mi&#xD;
zIyiNnjinjnf5klIXk79PXGXtqYHo+rAUWvxSO+Q9EE8vLe0dZbTGQQYfH5+ab/4K2Y+9zWfhwsr&#xD;
1KM4THv7T50JRBKFSbshRftNBNtJP6oRzvmz/ljc7ortHvCRa3kNi1+eNwKTiutmZ9oIHA/1gB9A&#xD;
QY/Bhc2KCtoy9S1IpGDFZgQtXLygsR3HEUDC79qy1fJ5T6pByCyaJNq6hj5OnAyYyZPlswJA4hp+&#xD;
u3QKqHV5AnH4TI8JjyO1eHxaquLj2rECibzpIcgZ6kcTQRcBId7JdYYLnkjKPc/O2UrEZYZmOCFE&#xD;
LrRNEnadX05T6JJTbhuEShlBJiN9GOWil5KkZJz1pRZx9RNabUxA9pZRa+KP/rhAHqcQ29gOXy4=
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFAzCCAuugAwIBAgIJAMSUpY2lZMEoMA0GCSqGSIb3DQEBCwUAMBgxFjAUBgNVBAMMDWZvcmVn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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">_06e890540d3e4779c7d7b93539730f8124</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_bffb92ef9b266f4eed160bace04b4ae0" NotOnOrAfter="2019-08-23T14:41:57.938Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T14:23:37.937Z" NotOnOrAfter="2019-08-23T14:41:57.937Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AttributeStatement><saml2:Attribute FriendlyName="personalIdentityNumber" Name="urn:oid:1.2.752.29.4.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">196703236817</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">STEFAN</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">ERIKSSON</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">STEFAN ERIKSSON</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="c" Name="urn:oid:2.5.4.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">SE</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="gender" Name="urn:oid:1.3.6.1.5.5.7.9.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">M</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantedAuthority" Name="https://foreg.funktionstjanster.se/attribute/grantedAuthority" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">tillstånd</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantingAuthorityIssuer" Name="https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">2021006537</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantedAuthorityAsString" Name="https://foreg.funktionstjanster.se/attribute/grantedAuthorityAsString" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">tillstånd</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="organizationIdentifier" Name="urn:oid:2.5.4.97" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">5563372191</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="o" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">CGI Sverige AB</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="orgAffiliation" Name="urn:oid:1.2.752.201.3.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">196703236817@5563372191</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantingAuthorityIssuer" Name="https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">2021006537</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement><saml2:AuthnStatement AuthnInstant="2019-08-23T14:07:16.172Z" SessionIndex="ad1f5988-55ce-495c-a9ff-4f53f73c0206" SessionNotOnOrAfter="2019-08-23T15:07:15.753Z"><saml2:AuthnContext><saml2:AuthnContextClassRef xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwofactorContract</saml2:AuthnContextClassRef><saml2:AuthenticatingAuthority>https://m00-mg-local.idp.funktionstjanster.se/samlv2/idp/metadata/0/10</saml2:AuthenticatingAuthority></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion>
2019-08-23 14:28:38 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1220] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 14:28:38 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (_2c8db72356efbc7c7d6eef6b98ae29f5) in context (MessageFlow) with expiration (1566570757)
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: validating signature profile
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: signature verified against message issuer
2019-08-23 14:28:38 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1220] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 14:28:38 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: SSO profile processing completed successfully
2019-08-23 14:28:38 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: extracting pushed attributes...
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeExtractor.XML [1220] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeExtractor.XML [1220] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:1.2.752.29.4.13
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (givenName) from SAML 2 Attribute (urn:oid:2.5.4.42) with 1 value(s)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (sn) from SAML 2 Attribute (urn:oid:2.5.4.4) with 1 value(s)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (displayName) from SAML 2 Attribute (urn:oid:2.16.840.1.113730.3.1.241) with 1 value(s)
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.6
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:1.3.6.1.5.5.7.9.3
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantedAuthority
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantedAuthorityAsString
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.97
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (o) from SAML 2 Attribute (urn:oid:2.5.4.10) with 1 value(s)
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:1.2.752.201.3.1
2019-08-23 14:28:38 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeFilter [1220] [default]: filtering 4 attribute(s) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (o) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (displayName) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (sn) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:28:38 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (givenName) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:28:38 DEBUG Shibboleth.SessionCache [1220] [default]: creating new session
2019-08-23 14:28:38 DEBUG Shibboleth.SessionCache [1220] [default]: storing new session...
2019-08-23 14:28:38 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (session) in context (_b7bf2fe609d9c14fd943f57e55fa5a97) with expiration (1566574118)
2019-08-23 14:28:38 DEBUG XMLTooling.StorageService [1220] [default]: updated record (_06e890540d3e4779c7d7b93539730f8124) in context (NameID) with expiration (1566573015)
2019-08-23 14:28:38 INFO Shibboleth.SessionCache [1220] [default]: new session created: ID (_b7bf2fe609d9c14fd943f57e55fa5a97) IdP (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.19.108)
2019-08-23 14:28:38 DEBUG XMLTooling.StorageService [1220] [default]: deleted record (1c257ce2ff42e081f12b71a0f81b8f3c617bbb05f157760b567d3a3c44010deb) in context (RelayState)
2019-08-23 14:28:38 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 14:28:38 DEBUG Shibboleth.Listener [1220]: dispatching message (default::getHeaders::Application)
2019-08-23 14:28:38 DEBUG Shibboleth.Listener [1220] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 14:28:38 DEBUG XMLTooling.StorageService [1220] [default]: updated expiration of valid records in context (_b7bf2fe609d9c14fd943f57e55fa5a97) to (1566574118)
2019-08-23 14:28:39 DEBUG Shibboleth.Listener [1220] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 14:28:39 DEBUG XMLTooling.StorageService [1220] [default]: updated expiration of valid records in context (_b7bf2fe609d9c14fd943f57e55fa5a97) to (1566574119)
2019-08-23 14:28:47 DEBUG Shibboleth.Listener [1217] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 14:28:47 DEBUG Shibboleth.Listener [1217] [default]: dispatching message (default/Logout::run::SAML2LI)
2019-08-23 14:28:47 DEBUG Shibboleth.SessionCache [1217] [default]: searching for session (_b7bf2fe609d9c14fd943f57e55fa5a97)
2019-08-23 14:28:47 DEBUG Shibboleth.SessionCache [1217] [default]: reconstituting session and checking validity
2019-08-23 14:28:47 DEBUG Shibboleth.SessionCache [1217] [default]: unmarshalled attribute (ID: o) with 1 value
2019-08-23 14:28:47 DEBUG Shibboleth.SessionCache [1217] [default]: unmarshalled attribute (ID: displayName) with 1 value
2019-08-23 14:28:47 DEBUG Shibboleth.SessionCache [1217] [default]: unmarshalled attribute (ID: sn) with 1 value
2019-08-23 14:28:47 DEBUG Shibboleth.SessionCache [1217] [default]: unmarshalled attribute (ID: givenName) with 1 value
2019-08-23 14:28:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1217] [default]: validating input
2019-08-23 14:28:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1217] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 14:28:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1217] [default]: marshalled message:
<samlp:LogoutRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp/logout" ID="_2db09ec633999d1943ac286cc35a169b" IssueInstant="2019-08-23T14:28:47Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:Extensions><aslo:Asynchronous xmlns:aslo="urn:oasis:names:tc:SAML:2.0:protocol:ext:async-slo"/></samlp:Extensions><saml:EncryptedID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Type="http://www.w3.org/2001/04/xmlenc#Element">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
<xenc:CipherData>
<xenc:CipherValue>MGP2kx0AXeY/8a5WHH7oGLjVWETiMZyLqkfOIP30VBdlElEeoHpUVNiktglscbaQofGE/wbSoyqS
OHTXrqy4hjWlbXrn2Fl2WdNARwYCCmjV99+KhXtCq4PgxZOQyWvKSArdnrzdpwkG8TDa4CYnVKdu
qkamYjNeCKC3NqRZznonV/1Ce9TDQvcllPcM8O3D9vHCqqP2NoYasux4HX5xw+QKrPZcqk96LsGF
kVTK6E3XXoQfC65J4WgVS8mJvIe71WhG14bGJehVJREjyxEQYKew2+sJm6bQczlbjPyp4S6x4OjJ
4qQEG9H76sNN+9eG/XtH2jbVQTNqLiFyqGcpf7WBbYTPifP3xICl6xgFdg8uqwJiatxHEVO50qfC
bqLQRPVraPWUzu60OjvpGNCAVW5cukKYkXjMaID8APKZUez8akfyJN+yDqYF0z7pRp/wc6BFwHzE
wSqFAmDSiSYvp2iIGduMY3sS0Nm6TkFmejy4W875VJxUjTUrq4sDAITEVnbBxv+s4aHzEpbYoRli
n19d3vJuUa6MZ9X9uyBtD9JeJglYh7RTlEMPrI62Gb+zHBwwpLc/CWQsHg3pQ6+1CIYoo/35/Tkm
27vtkse/wCEu72IDKp5+Gqdr2QIhn0Wt1Cc+PYD0bUSPgi/BfoU9/naZPo3ecGEbhZsIGDeB9n0=</xenc:CipherValue>
</xenc:CipherData>
</xenc:EncryptedKey></ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>2snpHs1X2RaCkWi0nwkBiGmWD76p3KGrz6oWzeI3QrwuRVTuQeWrY8AkqRb1mOrzLq59/6GXQbkF
JNXt9fInIoOGjVjsRsPuUZ/AniQXTcD9Df7eLXFwAvDbPbReyWXj10yMNpeMnkHdp9za5kmGKJZ7
2I7DYGtq9I/QfcckTDwBsuBWt87NsW9HHkY9D1xlgvfokiveKFDDUo01siu/+08NPpBXX/9EOvsF
yX040VvHRLaho5aSl9Inv9kvJU0lFmBQ6y+SVg7+96PCQZTjTA==</xenc:CipherValue>
</xenc:CipherData></xenc:EncryptedData></saml:EncryptedID><samlp:SessionIndex>ad1f5988-55ce-495c-a9ff-4f53f73c0206</samlp:SessionIndex></samlp:LogoutRequest>
2019-08-23 14:28:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1217] [default]: signing the message
2019-08-23 14:28:47 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1217] [default]: message encoded, sending redirect to client
2019-08-23 14:28:47 INFO Shibboleth.SessionCache [1217] [default]: removed session (_b7bf2fe609d9c14fd943f57e55fa5a97)
2019-08-23 14:29:33 DEBUG Shibboleth.Listener [1221] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:29:33 DEBUG XMLTooling.StorageService [1221] [default]: inserted record (1ca8c481270c1a0c2c4fd84dbdd1b30327b419433374d4079afc2213e0945f14) in context (RelayState) with expiration (1566571173)
2019-08-23 14:29:33 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1221] [default]: validating input
2019-08-23 14:29:33 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1221] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 14:29:33 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1221] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp/singleSignOn" ID="_454fb644f48e64ec7882d74bdf4313cc" IssueInstant="2019-08-23T14:29:33Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 14:29:33 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1221] [default]: message encoded, sending redirect to client
2019-08-23 14:30:07 DEBUG Shibboleth.Listener [1220] [default]: dispatching message (default/SAML2/POST)
2019-08-23 14:30:07 DEBUG OpenSAML.MessageDecoder.SAML2POST [1220] [default]: validating input
2019-08-23 14:30:07 DEBUG OpenSAML.MessageDecoder.SAML2POST [1220] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_13e8c19d11c3b2db9249dff12a523332" InResponseTo="_454fb644f48e64ec7882d74bdf4313cc" IssueInstant="2019-08-23T14:30:06.749Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_13e8c19d11c3b2db9249dff12a523332">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>4HQJNLiRQqfgp8ZL0HFbnUkPqz4gNV4spdjIgqd96vY=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
cdXIZCDRkY3cTLMw0gD97U/7R+NglV1yiTKqcYYQ91lkEgwl0zZfkRqE12lMpXEHfwfCQZVuPDRo&#xd;
X80H8eL2BfoQTyNTe3lAVmV0+346TvL/LvIDKT9b8Pc08gNF+C/ZZsaOenEQsI6FoAtOrVLs+vOt&#xd;
qRRLx1P3QWIOgIF7ZFfMIdwX9dct44Ih6aKL+etkgVtK4v0SZ61N1+ktfIvuOywwqaB5ALj8PMU1&#xd;
3EZn958YevBu1f4vB9zx7d+Y0D9aG2CQFz7X/0sED0k+EN//zIpJHtQTTkyEoaZ7ASX/gTabQ7p5&#xd;
2YoRlEUOC0D6aBt2a/4fCkpwrz66wRNzmErks3dBuXqcKN9bsxn2dCuyD2Mw7Zb3casovqHDdGHf&#xd;
Nq9kU0PmrDJi7n37HfQ3pM186VpTnXChtsPLpa3TXFFpgFhgfA3+u56/saIImL7PF50qKaAKB2wE&#xd;
/m2vyujK+D/InsRnTgxjApW988VyVbiFVGBa58qHnZcJlcezOW2A/YLdpH+4rgrxMYO9HQ2fWJla&#xd;
c3XCDFt+j6GH8TIiaGDAUr8K04V63GbsM7RcA5cUK9y0trqtwB0RXh27CIHFkRi6BHQYoIhsAO21&#xd;
/BGHDvBw9PL67C/ds0VxvzI2/CN6nYmuCUnZ6dtVnfezcO/R187w/b66qrJ13CvqPo4EvvY5sYo=
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFAzCCAuugAwIBAgIJAMSUpY2lZMEoMA0GCSqGSIb3DQEBCwUAMBgxFjAUBgNVBAMMDWZvcmVn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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><xenc:EncryptedData Id="_54cbd41b145c486f854c1e7d28d1ce4f" Type="http://www.w3.org/2001/04/xmlenc#Element" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_9eaa2a776bbf68dabca6a839b45b1b02" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/></xenc:EncryptionMethod><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>FG/G4SWQak4i8mc/WZCz4CHjA22Il7R/xHY3k4lKxqZDc+wS8p6nob4/Ydhr7hC7hW23nL4B5V7P&#xd;
VNxh5vrKW+p/bl4bEBMa0Mwv6daxh8i46acIDxUAtmFM+eDX5ihu+GuwbwPptB4lkxO2/IhYwEL4&#xd;
IjbbXaSrVIrT3piaatF8K7WBl+WxPQgTex7R3raLkvv5K3/Q2MBo52arTT8JhziEJCBrqLozhr3Z&#xd;
bNGN2c9MdmfoaqIZBX4Bn8ujuJv55diod47x/cuVdTXwn0fZhd7oPjUkyRnuhjtUXmAKs5NlplKC&#xd;
nY9OcLbh9fitbUAvvkrhKtq2RlHI/IPQabZtyGQ4aFmWluOitM58VtXevlRTe34fHZDpSYNx2y5d&#xd;
9hP+EcVJfPLBOw2fZfSKywe4ZqMSeC+iA0MsQragUuX4SkU73OY4Fvaie8LiILv+/ypBDQxqEUXQ&#xd;
Pp4fEEk9XypNTOxQINZJ3ZotWVg9oTwqHV0xaGaNrH4sSc5tndoHYw96</xenc:CipherValue></xenc:CipherData></xenc:EncryptedKey></ds:KeyInfo><xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><xenc:CipherValue>szjFKi3U6MqC46vh7l7TCnT1qbAH6MS5aBl8TMvzbJ8IeuVHlKK2qBtKGIg11ERGQbSA/aj5p4nK&#xd;
rJGGH9BwKSrpluVvIUjYkGeoifb+9rgnlXBlq9igTdmXg9OuVc1H/QTgnSByVqdX3MVghq0CUhkb&#xd;
ATe/PeRB7E1qp/DoKVSkXJz89Jg+r1y23NjsFtbdfu89bhwjAtTglc+IIXBKCq42ylxhWKUKIGmd&#xd;
EPJygcFkXrld58RiKwZCfxt8DfkHOtIU5CQ3Obd/y9Q9QlkDM6Swren6R5f58OrCBgwb6USfQEDA&#xd;
RgLoxEi6GnLfI8O+jXTAxIG4NpSHtlZZx8fy5eCiITmFyykmb42W35f3Nasl1ptsbFp/FUJzcG1g&#xd;
iuKc4qn4NAjhwkMstQmE1vq75s1RTxIgOdOCMFriWXTBFUGJUb9T7RLfNuBkAbopE1AQ6qZ7M3cw&#xd;
vz+Hl/34w0S/lcYKo0KtD75umU9RV1t7RJM7beEi2ihQLf/aL1wBnhxgmy8L/w8SIY2OcuDqSTZg&#xd;
Ibg2AN2U1YevNywkYTfIlwkUvohRNioLGlOHCQBTMshsTVpfHabWwvLLQN+48EgjLxiqRudxLC69&#xd;
DuRfQ29sRYN7ZFyCiG51a/15A3OkUcQs8AyBdF9On/0y15/3/bCNEryYvqJh0ditPfx9xtA3ysOx&#xd;
bsU6Yp4M2k/OJAwJoKHb5411Yc7eNAHlN6vJLiEQBi+hUUj68/06ZDR8DGCRKaxNeIZnJpxVe67n&#xd;
APgmCovP957TkjF6MC7O7vSg3wxjIHU70qc/OPycyUJ9T65sV6NDZDXnWwA448sSExITkgHi/56f&#xd;
pncGIvtPbZY6OYsaxFT0Bo36zbLLeI+wQUwfb5sWm9L2vWWqy4iH4Aq4w4b84mjhaVw/aiNwhhwZ&#xd;
ckj8sT3K4XaPvfQDil3hWa2lN3Bn885wPmQa6EeUGMAAFM19Vy4itevGU+bwad7/tC2lP40YUC7E&#xd;
LzPP5F40r9XpsGQlFrVb3mQT2hqaMWr7Plbnv++g2Npnr0XiY7Jdc3NeMBmdmvZjweQWRub59uBM&#xd;
Qw7xlZfnqxS4TzRT/8490ZmHC75OVYqZ9Tsm9DP9UKRuHghjn5XYweg59rHVpFcnvxJi1OKcztkh&#xd;
CKk3Jfa9tHGTXoB2SZRjoTOXGOiLfA6jgxG0CRdrFmh+BU/9HjaYmHlmX7+Ywj4UY/P6h7yo6bSN&#xd;
U0lRRYVrnba1DxBavBQlRYzXNJ+134slmQ8BWhRHbfFZKnt3BKcwINzkw2yxMxZoKiegmUlot+bJ&#xd;
A2z0ZfI/avYmhkOxs4i6Y80yw7b6k7o4Ky7MQp0vos3fHKVWkpj96P1uK/ceFc1KdCSJrgbtTxnU&#xd;
wTi+cwvglCILZbsKSrU4eNTrHKK+Xlx/1TL+1fXVZDyjEbEEkTW/2JWLlCayKlHno9s8Y60cUc8s&#xd;
VmJwyYsFo/jqjltApvsL+27osxhzOxiN7SMENpUo5cMIJxyrUfABeBtZUFL5XzZGIlFFo4CQMTQ+&#xd;
W9Ae2KSkR3PxKAvkduCkvOeZMQhVXtj2XZkqZ9nAwc/gcjQbXv75w7H0Q7+AJfZBu6mN+E+avRrp&#xd;
pMofv1r+tksC5N0c5XZH6IDzsYiVDeJvmFr1RCYJhFVEt8cEi5Uu+dv85XKeoAuAGdRRG+6YtrrQ&#xd;
esY3V/afnHTD/gxrkmyPni9bS0cA6e76hS+gd9T4v1h1QfqTDfUaJs932KgFvqBVdtPSWZRyBOFT&#xd;
/kDdrm1u2kOs00Jj4iuZ26rQd0NKMsADDrGZEqitjcIz/xs5c4Sq/ZFd7v2BQi8Mss9Nlhyh/T22&#xd;
gcgF+UjjPaFnUxjVOJKiKsWFx4mbPRc/yy3YKhbges1ZNueE9+XTQiUNMiSC3cU7cJK8xI8nkCv+&#xd;
Ql+aOQBfs9pvtLAAnwXvF28HWaXJWUpKMFgYXScQNaZZkqmCu2xSorLBH6WW7kf1klqU0mlAvBvL&#xd;
+pXFt9epC++WP9W5k5f0TrEdOL9giSC/UJB8r/dJckOmHCNihuK/v00Y9Grm1iGb9ZJ18BvVFCsK&#xd;
1Tgikq8KAnHdAi9vwYxQadn/is46K5faSw/I2/pYBXb4hfnG/FvUXMMcOfpoz4JNBzWH6zIqH9GF&#xd;
SUyD7sBrFMsTePYsHHR0oYkyKUAj3YYEHRBA9MiguPodiAifbYou6VnepWh/CenOlGm/AgoFIvje&#xd;
fihZEVS3wgcgGKWTSpQxn60Qv4cBI2/tPipn2kXIjtbL4QHJlaABHAhy3Bqmp7qOsnvsFKqUTCUi&#xd;
Yra0GpFnvLrok18ybmohQ5gHowcEqvbMy70wlvDgiHxbOwlizwzC7fFz5fy/SzLXIm1MBTZmtiWq&#xd;
QTHKbMMjYia5DA0AbLVT4OSUHH3l+svhU6vCxkDXMfEVuOQmIjTZ1OI9ILueflW/GkIIBm1Mdq5j&#xd;
WGIR8UPDo08meIyQhOo6PdstYORJGoGW8r3PxqwfWqBVewIhKXjWVC4S56Qcjc7pqfQD8LaEt1P4&#xd;
jX4m5eVDP0YcM+MtLEbXJx6/g8lIir2Ig2/yYRFIQIkcA1qUwTkKkAyIcMk77Dc1Ss1IjAZ5ZNGx&#xd;
Lf9keGfkJ2yc5vuYswuMikEFLuRXFTH/qO9awvAogsAfZaX+QfzuIP7v3+Run7z7QJzBT/nd31Dn&#xd;
diNgLFcumh2EFKAgkIYdPtEY6yUkGRRTATRsBowa/egBjD3Ez32XGRXioWnYvs1VEynRCakkjnuO&#xd;
21symhvqpBFApaU9BAdV27hfNLtQKOYEkpIJuMgjKew+dNT5TuPv9mI0KXYoIh/gkptBLMpdAu1M&#xd;
gOklQdkmCGI0shwkP7V+vyqwKvG2HRStMq4gj+HxmKPl2kvoYPNgh/zn5eFKrllZPrpEnSUC6opY&#xd;
eoyR3CJrNXC/fNppvmMOj3wCDTX1UQU5cj2A38DZrMLPdrPRw9V37FX0eGUsfo2xPX8wi1vKd8y2&#xd;
wn2KrXDaLr5b4VJM1Q0Smf3umEYpKXhhmXTVTor2anCmlNpDQOV28oOi6DRGfPv06ujQbwLxObBH&#xd;
uogJiWOmixzidyo+kxLDC8ajFEI+308/bj85nIicJ4QdeV+6jq7sdm8ehPoxAvrBuET1BWluJgft&#xd;
xGeP//StOXGFqlfTcRu/Ki2PSQyoc9aTSnX14K3462LAJBDHR68i1hFPhMuFB85lJ/aizBW6RyIq&#xd;
tYjUqfugNsfA+IeuDIUmpEIsPDnn74W8SvdpI9AV2iB0gLnId59KCELWwMCQggvI9KK+nhgV6M52&#xd;
frnOdWHuAu5FXBJfza8FDq6qeEzVoqBYAdrxPHfVHlGiZGdln4lsiIdPgxQm8FJBCkR5snRrfz4P&#xd;
/3gWtwMk2u6KlDDtyl0LRppK1kvC4uHVXAFu25HK70GXYGFFrsL9mfVKWu6s6TBFM/M2FJyJpKfi&#xd;
PEgWyRk2wYunuP6IkSSG8F9bdkRdDih7gNVd7nDJuGocKDKn9thjSkZlT1ONM7i2szeZoU4xFv0f&#xd;
jJQ2VmWdOp+BxdNttuL8kKLjZINfepPqA2yujVLDJB111DFcquYddk5FoQRAKDV84sX+K0Tpy/xi&#xd;
aAn0vqC0HsPtJo6mUspOohjhbaLpJCleCozay5e+ankgAQ8cCFpQ1kXBDoc8uzuzy00lSVRIVZMF&#xd;
zFsxtcruU/mst3l8YWwmhFDmmI8JytfkTX5nFJYsvfYNfQ9rNznZLwOd39f0KcP6HoaDIOoquTgG&#xd;
XPrRj0d/lcsLKflq5lKhJcHiLESED0bwH3AFwaIoOwvE5tjEknHc2uCRX6UFuNwvsAEWin6hCz+O&#xd;
X5MOCz+USEvvELVH37YMDSacZ7u0eweJdGrpJeFuh2VIInJ2w7h/55Ot+uU2tVrSFb2YGmLV2ugM&#xd;
v4FJQji3KQqjEpKLM6cEMZH67Plk5oQnJ/5aL4JXn39Po3nltK8dSPWX9Yg/aF3BcMleHlb4rO3N&#xd;
ZjYIhIbLWW333QwNZAgkZvGzSHfAwc5PQWhPKc2faoVHMQS7fjFUSGAuqWF8wsVrF0j1ciRJzCJ8&#xd;
dfMJwPbXUebczROm91Uoedoemu1jBUSF1dEnBZUNR6cdwxzUKv0haOfK9XEE26WgtoLiHQAQSC7r&#xd;
ZSBtEtr9wLdHxeOIZ+fP4xcXz4Hq1eWz1zAaHhtytK54Wc2AKy/mVPnv30HwzRwuAdZ84Gy4EbPc&#xd;
u3FHXIoowc+SIFKF2bcSMsFrz+jV0f3yxkNbzRzhVoixrMgtBXCfP3fibOftjon9DZ6OfdcTQg/F&#xd;
5zj1T7d2KAXwjq4iuL37bbUPW2OBAEVa7LPoYcM3cIOHplosxZohRwZEp8pRgdTM4MYYHYGMUsUs&#xd;
2XJ3rzAHkqBzOX1hKngE+AY8bL+C8Gbb6JYSEFUOhr3AjzWBrQzBCeWEQC2afZ6yn41E2TtFknc2&#xd;
t8RMQESs7jWwj2gyVq1ypuDuMJUfmj7valHtqnthKdL+UkFdb6uSZV9WY1L+a96QF5HLp6rEClzg&#xd;
zpeNB1lJYOOqhHRrO4kspisQXp9azXv32bde15yvO9AfLtRxM+mog6oncRXfLy3Ls/aVACEV1oFf&#xd;
LXspmTOlyPHA9rrIgApV3sukti/J62phgW5qKHZB9a4KvTp7ODV3V7pzs+TgScGXUzzOaeO7i6aH&#xd;
p5uwB7fE5JhWXHlxC3VkbDIRJDf1m9Y68R/lasUVlGYgwzW0IsonODA0FMeInq6WrGQPmnGW4fHO&#xd;
1P/8Zf6Gd75Y7dTRS2QIFvMZV1nPNQVaI8pUif7z7QioTX24iZLsiHGTvBwC8lbmp4g4tKSU9oLz&#xd;
+n9v2zOEGJ+0VGwJDAaNOYo+TPZkJD6Tbr0MNyB42xoBGnNwABFkSwQTFTS56h8f6Ic+sAjBpH4t&#xd;
Io7/cuL2raP+aM531IBeJRQuuygQpdzEFi2EqYKIHtm7gtTDDXbhS/xGlhsERUZpuKe5/9gaX2Z7&#xd;
OP8R4IRsI8gs4kUCbOb2Pwhl7+Tmy3oEsEvu4KY8AS67X05BtZPqfTn0rdTjy+k+SGA57YCzQt1r&#xd;
R9Maq8ebAny3STmbyfnsA8T6U5tlxX+DimKvwd9v4vUd1JxSt1WgBkG2gSinP/r69ADGY0iL4KQe&#xd;
xZTurLzUBhxSSx8eY4Ss+9rbbCuKl+zLVh55r1xMDj4j7vcqZeTmnKvwo69TYtDulpyKLN+hKAee&#xd;
Rk5Fhx5B6vYXtGORZSw0wUVMQl+x1leAqfhQpW7F0ogM7E+vbVogzOANvfIaoleec7+dnu3HiPh2&#xd;
3okUBrC+x5tCydRrAqCytnu0YAIukVN/09YrYapRMUdv0CuaWYIG+Ez0bY+NAK1trmflu5TglwGd&#xd;
yAM7son23qu+jztrcl4EboNaHooM/w4kUweTGCUAaX6GnPH4SbkIYQsIdlgARXTwqjGADhOXrKMu&#xd;
Du0ooeBluZ3ovYrsIVCAjacytXgoF0SrUO0abnzsDRsuiX0wek5+ch+by7fjXU93WNy51JEIlvup&#xd;
BQaz6xgrth70Xi4tkJweQoTQ6Pw5hllwKdf5W9d6qw4uY1pOUMu6h6Nf45SLu4+QNGm251XqKZFo&#xd;
cJ4DhaN3F730RY6jn/V6JyWO6paAmAnNLDqQUFooYfQqY1OzbGxbbqmnOB7yklhYdF2V08Vza7H1&#xd;
S7R+1D66Vw4gOUBhudX+c6zV8jN0tc1VXBgBg5bYXwbFTTcB8rlyIf20gRXQxKAreYNZsYMQQi76&#xd;
Fn4zKWg3n8bDp/HNmMggVlK6Iq43ATnUxvzj+uniU+JXXUuezq85vqlYi7TWNgVNFvUVW6aiPefE&#xd;
GIPQpFjjUqI3XC9uGm757iXqkv4eZSovFg1M5/bibTkYrh9cdV3G7RAwykrjWwvIUdKIPPrGZCJT&#xd;
xHqlJbTGQuAJqxMZeRmWbVrG6uR/GzBH0gVye5Rmh5DqCPjqhhnnM/YC5NineZzJbNjeKqCXnNt2&#xd;
KqeINJKcbWAutwjBs8Bp/u4y7TbZ8j1lmL/nsC1q/1jVJ4FzK5F58tvy4eRAdd31VFfgnbyTZMk7&#xd;
kXg70KULXIbK0a+DJ20htJxwBpIC8RnPE/kQwptJjBaKEurI65zgBTPo00HsGok+AcWXWD5w7tC8&#xd;
mrGMMUCMtk9HnFGdektJ939ApTmv8bWRrj4+C2bmQ096SCWTf7K21CkOCm8HvFrE7FVk4XmiqKvy&#xd;
AQMUCZyteICo4SZUECaO3gyXpaa+aWiFQ6YyTZBJHmJLljg+q42ek+iFq6Bs4lwZVr6vp9m/h2QF&#xd;
Dj9Ob75lBfaeG3sA6b/PEAwXcLcjavh+QvwtgJFn+5c02i4NAByd5EXzQHDYK6h2nr76CXXPRkpa&#xd;
+jLbci4I70LbWYhZ7sJDeqv2WdVC5w3Kt/tCJqk4jWopZG3anXusexl5GEXBbUZ7c1Zw3hpKj9hs&#xd;
1LEeVSPRB2wQRPExLvc8wjKcsxOSn7ML9Dw8fVfa901ip4acwMVdeYGEhOXGhHPrZUQCuzEnB9ex&#xd;
bkwJKSQRyqUGPfYhvAT7rMBzSz1cUhsmEmDNlzukOYZApHJN7Evn/UbvxSaryKr+9mGccRNy5Cvh&#xd;
zCQfEPPvlBC2VsugsycDFnjusnSpO1a2Z4ULLrNGr4oU4dU3g1vDrZoxg98OzEMBeIiGhOubaizu&#xd;
75qm0FVDGi92GE9/ks5bogDUMuyGbyOUbWcfmc0ZGyC1QXaFSWiZyuRWnbE4J1wbezznly1NPVWX&#xd;
UtDZJAM72wicePc9b49aDWBj4zmHw5JO5Kw22Pq2o9y1wjwbKDGCMqIi8CMc4P49L8CtbTUI/H89&#xd;
rCPsg6tcjwgm8SSElpsv3D0mebV3Ue6wtqMl7nWtL1FJTKQfSJ5wV2hUdJ+f6TRary5j7gG26wzG&#xd;
/UYyjvrzRVQcIY6c9cHixfan9PSKhA0juEPYSGJ6KhlLnvx2z7QqWxEh2Cgvy5trysN4YpAxu2nT&#xd;
Ea0tF8Qbo3ETVTKTGfIrhMILbxx6ro9EojP8AMsSLrdF7s8khOmYcUfS1uMasq8rmlozLk8iCvig&#xd;
L/GcLSd+8lJGmDymwDioHCm4goyjQL6UK7CLHR6fwtevSOPafoI3C285uwdaFMFDlCnwUzgRv7l0&#xd;
U+OY1dmOc8r0pMlVEpt1c7WZHnENfgyZXpys6C/79eLZVoKGXgSpbmT18j29V1XZGx/FCYHfdhAr&#xd;
iaFFchmSj1Ek7+ZQhzhV2gRel2mFtn0o5aZ8pNW8daMLtgl0cYsBUuy8MjMdjePKVKf+BjTZ4zUA&#xd;
lJf0OkESykjCSpzbO42mx9Vt4kVRlT5WFODTSazQ6FjPgppDJJBhrzqZUQbkdlpE97hpYmcVmY9j&#xd;
lijPTqsdcYuyN9qVQQvloooCKFRPuxQqFFMbXIDA/Bd6fHgam4kpLG8F0R/gQb0he5QsEJOjILN1&#xd;
ORWJmmXGvDkibgn2QRmfociLEplL54PDNZEcQ18S/7x3gVOQFSlqEbpDCEj4WaaKmvS0M3iSqkgq&#xd;
ubQLevWo8BPFKibYaKOL6Sc5Q9fVW/ColEnrw3PyyLec4K1UfaiTuMhVHh9UVCd/2z1yfLbsF7E4&#xd;
D51qHxVF4wSktQA0N3wlEXFNRAPwPL6moGrdVB3pVHrWMxc5O3SmcbUCfMvKEgzUvJPXdMxg6Ysg&#xd;
H5/Ty09om2Lg0wnZGxpDCKf18oeQjsWZxrvIMTqV7F6V0zFu+yFvQFqxA428BjKD093w8vUO9SiR&#xd;
qvB58V1g72Sdpf3XoaLy204007BWV0PY586f3TPSXoWGa/ittYwul9nF+J6zlgyOIUh5osDKbMY4&#xd;
VE9fAnYiVe1XCr4iaLloCXC9J3epSLqFwVgDpV8STyGdsqVNUOZF9Mn1zqo+M1kOG7BA/uq4OL38&#xd;
vBDUwEHc9e8VEoaKN8X+aOUky5ToradP/H0T1mIS9XT+1oaCQw1J4YJL43Qvm5wY0M3Jwz9SPxb5&#xd;
17RbLwGcfKQRVK7xp2UXy5tSeTSMaW3eXYv5aMm9+TRK6+6nh+CNfY3dLCuqHAnJ4OlYOVngI1V/&#xd;
mpzuWU7MsFRadlgC9uvGIdGov+dDcXNZNop2o2/y454Dbmm5dpu0XFxmjkurfrY35ssXatO7fHRq&#xd;
u1vLrcSvN0QDl+o/t+nygY3L2WqaNoDqhYVV2k0/3RJgZ6jHIQY0hhyQ1Hb2X0TqYx/pCVP04qqd&#xd;
742pgjvh9Mw2OZPj+y30YIlhw3oMIcq4NMhtDZAQ8XP/aSQ07spMexJeAQyv0RPZIK3b0n/Rxy/d&#xd;
B0Ez7g/t6WpN/BJO3fjivQs8wN/e2Mo5bmHsXAeueoLtbZoLUcyoAq6Xq3YQpQYD9p92T12vqyO9&#xd;
U39ywvZCMtyoaRVfFcnWvUw76uqRDCnp3uwx6kEsh4ONuJam6viQGUSweNTSx1w+8x2YZMs7PZSU&#xd;
v9qG3N4p4aLMJbYhhqVboZPyG9Jsy1DADY1/RV++PAO7ORYYkvrY22EvyWerzL4sariTpD2xCv+h&#xd;
2JuETAxyNGEhR/dMGdOHNq3zwfEZHfxG+VAUT7FjlxU72AywplM0tCs8lAno/dsHUoQvc5fIa/J1&#xd;
8hcZGl2QrVBjJH/GvlE9JqNwYxP8nmFVFhNDQ/7M7u47Pm4YaF6aZMLvZZdFvLEV9hS8UM0whKFl&#xd;
BnbOHR68wdgfpCfDq/R1QWp4K9jyEK9uguFk9j6ODUw+3xEAIFamihZg6Hv5HpdAKv8XMszVw2w7&#xd;
fEK0wZyJ6OA1lJaR9RZrak7FL6vty15FZRKUFqODq1LFxDJwWwP4X4nvGkSrf38+B1awSxRp/q17&#xd;
kJMJbMkMgOM+x85GH88bUgKMjL/B7x/Q3QPgMc1+3L92CclDwFQr3iCVEDivqvx6p8nYLzDeYY7+&#xd;
cl/JB7En2eE5cg1Jm99FlwMskj4CWtLKHFOX6G9Z8YLQ6BrYZKI+ub6aDHys43ddFNBCIgXd2TSd&#xd;
naceFQQokfKroUjEua6WqUcS9X3d025D3wHQ5j4mFHqKvwrC/6PddDRVzzu37JqNDZNRADPMCjym&#xd;
9eEergvORrKKrZRKrxhpZu/IUhkr2AVEe/uHi7kbYey43y3RIbhb4pM0ZRvz71ZVjKqbYRWtqKyB&#xd;
lvauB67jeBQvuT1UF2oaGBCoIcvLqNDvUDI4z3sYm3VHnhUTPgejRA2VxWmgqXWLqDVi9V/Lbp5n&#xd;
FChhqk/PKYfKTCkWT/PGcDy9MOJ6SXP/8ZcqPwAj+95kE1494DLYkFh8nmamtqwoJmh1Kna/jLwx&#xd;
qCi3+TiJBUiiH+uaXYbviRpcXFB0SQWXBSR9Cj4fSWhZi4pMFzOg+AW5SaxZCW8U0LO28nschL5U&#xd;
27hHH7PtRlamFzKPVXVZLFQ9JiZuW/9GwTqdci7FRNwDvrzKnY5036gi0mef8BSPLAlWERMwrWY+&#xd;
/sWgNIW4p8Vvy1845NjgxKs/bhhuyMSn6qa4u76XrIi3vmsGS6wewWoT5Fti8/jD5PZSaYkVSZdd&#xd;
xMP3exTkhKzLs7X3WFzZUFING5JQQ4Pc1/IN7lhfDDWorHcfW79EUFU9YlkbX8vZU6qgIBlZqrLX&#xd;
ezyCS9o3B9zVNcPz+KPoLNpiFhwyA90W/xezP1szj4lePaDcedsO6dVWOVGkgrFo2mWy5aQBl8M+&#xd;
ynZ67ZG2xsH0JonJnlao0HBx1/8LwxZBy4PNLy4LATBHXscF+obJhsGkwaOtww4xnNiLfA4qgMzc&#xd;
uzOpm87x/UA0M24jnf4FsXe+ro8rF5SJN9JLFmnf3iIRNlEAEx8YfJ/IBMC2UXpsorsJqRJV+E7V&#xd;
62yKGI3OFyJGT7+BNhFsTlVhdRWCHOCGqJrZmb4GdRZYWKDV6S+YFJYxdFaa7+zNAjzPtsk3HvPa&#xd;
HtCBTqnh4WKLA3pdohEwuszuHrMHUg9XHAeXw6h2yJVJRkqgI5avx0pnGCYLyX9q57pdYnvBNokL&#xd;
UifiYljInOejXtcGKV24xEu9u1XGp/oPR3fqiSa8adGcKb9DIZPzx/HUN69gU1i1B1bB6u4iAXaL&#xd;
bRxDqxv9z7qTXJ62xp5yZMt4mklqZhzizf3XKGakB7QurXrsbvq3WLG6jeZ6dqzG8c9ENbOoPCwe&#xd;
oAU/r1EIbv8MADN5DxEJztxwLD512ZDqX3ngWr+zsaRaU2GwBN3mYNRrYUU5dxZJZQv3PGq8dVTM&#xd;
WzZlmtafGmDcLTrcn2rziW746CYt8p1gMNMm2YS0wvJfovNbuNayDU7MK91SHyvSiVtl0h8RpO6R&#xd;
kOfctahM9BD+VY7HdXrTTsE//9jWe8fGztJ6Y8dpV+pIZN2uMdS9thOrJXSoxGqlC8l4kXsKrjH7&#xd;
AvvfNTfGCs0QREUDoumnW1OFWPgkrvNMjAqaR0Gbo3r+hdZUTRiQ/yE1CjItIsWrXVOeWx4ypkO+&#xd;
UdHrxl6fu8nGq7AH3ybbbrhphznsr6sRxCEbbJrh3+tgdu7QehrM9Vs2FzevrVSlnugWBWAiBKhH&#xd;
dOwHa1QQ6UZz7Hdbu1klE0qOL5i8VaQuSXwI+jtwO6C5NtvBWajYUUR4zPYMxQzsBeebzdKwIm6/&#xd;
xbYRqtYrX0Y9V2BYnIi8IJ4LPZ4X//DA8nWdA58Flrz0lT5bkn1TOWF/OAPqTfRRKMm+IJDFS8tV&#xd;
/NmCkfIZjQ3ubTxv5e/q7mO991fVkaNLBjk43RDak8smBPHJ6H0zWLtd+Ym7g4FlQIEk+5ZJxKjA&#xd;
qd8TRGutL9H4d5q8HSlVC/AlXFdM0wDhaPLpJZ8BuqqLPoxL9hnPxqcIdzMHZaLMsCCXhGRV5h4/&#xd;
AEu84VeoR1+pNXsiG5lSMyBz90gjNdDJ4ddVrcReCq0bOR+byGXqgNztb/mAq/IJdPXfTzonBEct&#xd;
IL76eDatWybX+bIzcbx1K0CCJwJ3B9TddM2NKySAxcNt7Y+ypwl8P/AhXQ4Tb4MfX94iF4tsubW/&#xd;
+PIZSa3c2O3Ti9dWVR1diUJRgyFXSncjZP8o4gJ/qmQKL6QXQLDyWtuciLiaP6/g6HBw0vgV1Lvx&#xd;
Ww0JeZcKBR4d6ODfhWG8GL4h/Km4v/TzPIuAf+8vloh9glgT9IQUS3Vh6TlEkX80S/QRoGtD41KI&#xd;
04V1botwaPGZYwf8MFyZLocsGwLIU8JB4MZsHdPJp4zk4J0HUP7Xi19DVZvB9Yr7KUa0AIf+S4h3&#xd;
orCONv1tt5COWreSgVmFKLd6x3oRMll3uoxvgIrKrxadtYK4hWVtwA0R71li523CqbDFI1AZm8/W&#xd;
vaJbI+Wq0MOfCJUQa2EjAjdcax5h8rhgsIbBg1K5Wdcr/M6Vj1HLrQt3nl8oJvGZiS+ITX+Rlivr&#xd;
S6m5fGOpVWULDdrDFTLDJLMzKIs+hEhpEeL3hYyDoNH4u4h3fbvXwMIkVjd+0Fnib4JuZTv4+bfL&#xd;
QMrMCqOyL3FjFc2xU2UMQr2HwSAK1ncocgQ76PfXVu7BBtU1KedUoA5cyruV7moE65LhinaUuON+&#xd;
tbVXkpisHznNl/bn5ZNPW32BzE2knoem9dOMuXc1nib7/LDMq/1IPT4I8Rwvap7P7IPKGGXUFgxx&#xd;
+9NzP36vc3ajqr/7//PqAvlEMZEhrsxY4j1leOXuDPJnprTpDDpQdIJ/wnVfdvCOdlT2+8TVFyeC&#xd;
NiXVzwaaKWI4F6NX+lgFrgWQEkywCtv+eri1Gx2VuurDrMxpyDkHyVTW0QaCbPpCe8t/HEa7cii1&#xd;
TbgawNtGn0N8oGgq4zF1zZ5x/NLYtd1xGd9GqnfRLGZ/XWOVSmf1qKtZwkdPn42jSbqogG23Nk/g&#xd;
mKnxfGUq34d0sDtrK2URYRhF7QhRe6sRJBCi1w55qZBPFOMPbsRWZs6OgVg7wgQ3pdtBNBTSS0o4&#xd;
3SKqbn4K8pa6LGGJdpAEeqQmOy9sZGkrbP/lj/MK9IzqlLPrBBY/ceZxuLpfoOtYGX5aBhjSpRFk&#xd;
3gcZXkHscRDrkEnfO4UQLg/HpbG59xXb1hM4UaAFjU1UbYSwMP18Q7UjFN9MhzP9Csz4vgJK/2hk&#xd;
2H+o6ZO8aB3O5P0rq2xjrtLMkmQPBo6YoUX8oWSvjy85iCOc/E5Wpfdx6L0PomptM2C1MW4RMW6B&#xd;
n/dSIxJ6ke20hl13lfqJFPP+mfQH7Kc+PtKCLGC0/fZGrQ==</xenc:CipherValue></xenc:CipherData></xenc:EncryptedData></saml2:EncryptedAssertion></saml2p:Response>
2019-08-23 14:30:07 DEBUG OpenSAML.MessageDecoder.SAML2 [1220] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 14:30:07 DEBUG OpenSAML.MessageDecoder.SAML2 [1220] [default]: message from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:30:07 DEBUG OpenSAML.MessageDecoder.SAML2 [1220] [default]: searching metadata for message issuer...
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1220] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (_13e8c19d11c3b2db9249dff12a523332) in context (MessageFlow) with expiration (1566570846)
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: validating signature profile
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: signature verified against message issuer
2019-08-23 14:30:07 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 14:30:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1220] [default]: resolved 0 certificate(s)
2019-08-23 14:30:07 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: decrypted Assertion: <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_61fc329e9d87c20d8b08ed6ecd7acf3c" IssueInstant="2019-08-23T14:30:06.748Z" Version="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#_61fc329e9d87c20d8b08ed6ecd7acf3c">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="xsd"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>4TeZY6PteuzQjFWpfnV6+KgdfIxqvqPO0iHL26iTTVg=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
fzaZYC7Bik9vhwmgWQW25YS/KeS3pTM0O9eErKGpSkrdxktQkFzhEyuyHb+eoH51yzJKHew4Rzak&#xD;
VSLVxd9gppIYHqfPi5Wxc57CJQcj/kdxFjm4hOeFRLwuMSJ8MNKkmn9ll2Y9DHmEDAMa4GdF9qwC&#xD;
wc8yOFm8SlAjnFKDBvypDUYMiEiTxHbZHrgqid/lnEK3R8BNwwaKHJy/M/oxk+k7ZXxntewDK6aX&#xD;
8VZKbEvQN60W9YmFpcXjnJPNpjxs2q2u7HdIsGpyK4UmIBSOp1oHISDilCE6t2VpGHpi8BU+Aamt&#xD;
gCcIPD/TzTTd41pf2tpW4SXqc1di1w4+GqGHsnmxgIgavx8dnJMQcY2E6cUbUvlun7Bn8xZ1sDeG&#xD;
fgVrk6ski4+6W6skGR8mgz1YzGOYdWmbQWheXW7Ty0uuvlWaj8iKaOfhDRpPh+LOuWi/rBfucrda&#xD;
1qbYNmDATCG81NqzKTpOaIqZBy5PQVIQUlEFCnkp6+QmaPUYdMw01PSKewj70UswCbdomrR5aq6C&#xD;
JtSeiCkcLgx+10praeb2tPWjBjTFCd6HDB10gt7g9qQhGEvtMVUhlGxf18wlnnnq72LYdUVRKBFE&#xD;
HgUpyCo3FBLXqXQ8awk16ERBBUi6HGRulp2e8IbENsuKbIuA+zWOwI3QNgCGYQiYxK5vHrBEWgo=
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFAzCCAuugAwIBAgIJAMSUpY2lZMEoMA0GCSqGSIb3DQEBCwUAMBgxFjAUBgNVBAMMDWZvcmVn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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">_07d7652c188eed6598e6ac315c7562c770</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_454fb644f48e64ec7882d74bdf4313cc" NotOnOrAfter="2019-08-23T14:43:26.749Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T14:25:06.749Z" NotOnOrAfter="2019-08-23T14:43:26.749Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AttributeStatement><saml2:Attribute FriendlyName="personalIdentityNumber" Name="urn:oid:1.2.752.29.4.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">196703236817</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">STEFAN</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">ERIKSSON</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">STEFAN ERIKSSON</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="c" Name="urn:oid:2.5.4.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">SE</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="gender" Name="urn:oid:1.3.6.1.5.5.7.9.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">M</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantedAuthority" Name="https://foreg.funktionstjanster.se/attribute/grantedAuthority" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">tillstånd</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantingAuthorityIssuer" Name="https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">2021006537</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantedAuthorityAsString" Name="https://foreg.funktionstjanster.se/attribute/grantedAuthorityAsString" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">tillstånd</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="organizationIdentifier" Name="urn:oid:2.5.4.97" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">5563372191</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="o" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">CGI Sverige AB</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="orgAffiliation" Name="urn:oid:1.2.752.201.3.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">196703236817@5563372191</saml2:AttributeValue></saml2:Attribute><saml2:Attribute FriendlyName="grantingAuthorityIssuer" Name="https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">2021006537</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement><saml2:AuthnStatement AuthnInstant="2019-08-23T14:30:06.749Z" SessionIndex="b7aca898-bac5-4820-8001-3933d3bef138" SessionNotOnOrAfter="2019-08-23T15:30:06.358Z"><saml2:AuthnContext><saml2:AuthnContextClassRef xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwofactorContract</saml2:AuthnContextClassRef><saml2:AuthenticatingAuthority>https://m00-mg-local.idp.funktionstjanster.se/samlv2/idp/metadata/0/10</saml2:AuthenticatingAuthority></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion>
2019-08-23 14:30:07 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1220] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (_61fc329e9d87c20d8b08ed6ecd7acf3c) in context (MessageFlow) with expiration (1566570846)
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: validating signature profile
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1220] [default]: signature verified against message issuer
2019-08-23 14:30:07 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1220] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 14:30:07 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: SSO profile processing completed successfully
2019-08-23 14:30:07 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: extracting pushed attributes...
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeExtractor.XML [1220] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeExtractor.XML [1220] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:1.2.752.29.4.13
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (givenName) from SAML 2 Attribute (urn:oid:2.5.4.42) with 1 value(s)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (sn) from SAML 2 Attribute (urn:oid:2.5.4.4) with 1 value(s)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (displayName) from SAML 2 Attribute (urn:oid:2.16.840.1.113730.3.1.241) with 1 value(s)
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.6
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:1.3.6.1.5.5.7.9.3
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantedAuthority
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantedAuthorityAsString
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.97
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeDecoder.String [1220] [default]: decoding SimpleAttribute (o) from SAML 2 Attribute (urn:oid:2.5.4.10) with 1 value(s)
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: urn:oid:1.2.752.201.3.1
2019-08-23 14:30:07 INFO Shibboleth.AttributeExtractor.XML [1220] [default]: skipping unmapped SAML 2.0 Attribute with Name: https://foreg.funktionstjanster.se/attribute/grantingAuthorityIssuer
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeFilter [1220] [default]: filtering 4 attribute(s) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (o) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (displayName) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (sn) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:30:07 DEBUG Shibboleth.AttributeFilter [1220] [default]: applying filtering rule(s) for attribute (givenName) from (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp)
2019-08-23 14:30:07 DEBUG Shibboleth.SessionCache [1220] [default]: creating new session
2019-08-23 14:30:07 DEBUG Shibboleth.SessionCache [1220] [default]: storing new session...
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (session) in context (_5a21489d0042ee0c0e827a7e1af72e12) with expiration (1566574207)
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: inserted record (_07d7652c188eed6598e6ac315c7562c770) in context (NameID) with expiration (1566574386)
2019-08-23 14:30:07 INFO Shibboleth.SessionCache [1220] [default]: new session created: ID (_5a21489d0042ee0c0e827a7e1af72e12) IdP (https://foreg.funktionstjanster.se/foreg-iam/samlv2/idp) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.19.108)
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: deleted record (1ca8c481270c1a0c2c4fd84dbdd1b30327b419433374d4079afc2213e0945f14) in context (RelayState)
2019-08-23 14:30:07 DEBUG Shibboleth.SSO.SAML2 [1220] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 14:30:07 DEBUG Shibboleth.Listener [1220] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: updated expiration of valid records in context (_5a21489d0042ee0c0e827a7e1af72e12) to (1566574207)
2019-08-23 14:30:07 DEBUG Shibboleth.Listener [1220] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 14:30:07 DEBUG XMLTooling.StorageService [1220] [default]: updated expiration of valid records in context (_5a21489d0042ee0c0e827a7e1af72e12) to (1566574207)
2019-08-23 14:32:38 INFO Shibboleth.Listener [1221]: detected socket closure, shutting down worker thread
2019-08-23 14:32:39 INFO Shibboleth.Listener [1217]: detected socket closure, shutting down worker thread
2019-08-23 14:33:03 INFO XMLTooling.StorageService : purged 3 expired record(s) from storage
2019-08-23 14:34:32 DEBUG Shibboleth.Listener [1222] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:34:32 INFO OpenSAML.MetadataProvider.Dynamic [1222] [default]: resolving metadata for (https://sso-test.wku.edu:443/samlsso)
2019-08-23 14:34:32 INFO OpenSAML.MetadataProvider.Dynamic [1222] [default]: caching resolved metadata for (https://sso-test.wku.edu:443/samlsso)
2019-08-23 14:34:32 INFO OpenSAML.MetadataProvider.Dynamic [1222] [default]: next refresh of metadata for (https://sso-test.wku.edu:443/samlsso) no sooner than 28800 seconds
2019-08-23 14:34:32 DEBUG XMLTooling.StorageService [1222] [default]: inserted record (f17d48c18835dea367d7c7dcc0c99ba195ec072e9263ac41d9ac0b497e9560f6) in context (RelayState) with expiration (1566571472)
2019-08-23 14:34:32 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1222] [default]: validating input
2019-08-23 14:34:32 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1222] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 14:34:32 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1222] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://sso-test.wku.edu/samlsso" ID="_aca629255619e347b8531ddc63309be1" IssueInstant="2019-08-23T14:34:32Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 14:34:32 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1222] [default]: message encoded, sending redirect to client
2019-08-23 14:34:36 DEBUG Shibboleth.Listener [1222] [default]: dispatching message (default/SAML2/POST)
2019-08-23 14:34:36 DEBUG OpenSAML.MessageDecoder.SAML2POST [1222] [default]: validating input
2019-08-23 14:34:36 DEBUG OpenSAML.MessageDecoder.SAML2POST [1222] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_4b307152d747d5cadb2392f008d8af26" InResponseTo="_aca629255619e347b8531ddc63309be1" IssueInstant="2019-08-23T14:34:35.871Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://sso-test.wku.edu:443/samlsso</saml2:Issuer><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_82aa8bc46767cf1d81e7158480bf2aee" IssueInstant="2019-08-23T14:34:35.871Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://sso-test.wku.edu:443/samlsso</saml2:Issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<Reference URI="#_82aa8bc46767cf1d81e7158480bf2aee">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<DigestValue>VWVN9/2rYQ7g+9CV3kedIy+PYMg=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>
c8a9GrgktvLVv2oKTFQ08L0KnMr8S/L0tXc9gWT03buQQ05Fspa+9EQd9kCVDWj3+THVSbMGzaS6
QpP7g/DAgRNTVTscjyx4oyYWr0PTzrx8+YDCTyQxzWjSQDuHUvgtGVTWD99wEIdHjgc1n4dz8NDu
Zujlr0cbciZhx3CLbhBVB/5BK5LbYsgEcE2d6Bgjmb1FM7oMognsIT/tkOSOazGuxF3bwfd4Cimg
/f8UNx5XKSc8DV2dMxHBxEB7iykfBmnY5uEsMBDhK9uqiVir6GxxyapRjzZO67GckEJEVsRflOk2
sxB7mesDhC7onwQSQnnk2owYR3O3klymBg+33g==
</SignatureValue>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>MIIHCDCCBfCgAwIBAgIQOXy8gtKkhcMewQogXzvMlTANBgkqhkiG9w0BAQsFADB2MQswCQYDVQQG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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">brent.haselhoff@wku.edu</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData InResponseTo="_aca629255619e347b8531ddc63309be1" NotOnOrAfter="2019-08-23T14:39:35.871Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T14:34:35.871Z" NotOnOrAfter="2019-08-23T14:39:35.871Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T14:34:35.872Z" SessionIndex="08c64331-229e-441b-a78f-4cfa19f8faed"><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement></saml2:Assertion></saml2p:Response>
2019-08-23 14:34:36 DEBUG OpenSAML.MessageDecoder.SAML2 [1222] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 14:34:36 DEBUG OpenSAML.MessageDecoder.SAML2 [1222] [default]: message from (https://sso-test.wku.edu:443/samlsso)
2019-08-23 14:34:36 DEBUG OpenSAML.MessageDecoder.SAML2 [1222] [default]: searching metadata for message issuer...
2019-08-23 14:34:36 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1222] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: inserted record (_4b307152d747d5cadb2392f008d8af26) in context (MessageFlow) with expiration (1566571115)
2019-08-23 14:34:36 DEBUG Shibboleth.SSO.SAML2 [1222] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 14:34:36 DEBUG Shibboleth.SSO.SAML2 [1222] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 14:34:36 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1222] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: inserted record (_82aa8bc46767cf1d81e7158480bf2aee) in context (MessageFlow) with expiration (1566571115)
2019-08-23 14:34:36 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1222] [default]: validating signature profile
2019-08-23 14:34:36 DEBUG XMLTooling.KeyInfoResolver.Inline [1222] [default]: resolving ds:X509Certificate
2019-08-23 14:34:36 DEBUG XMLTooling.KeyInfoResolver.Inline [1222] [default]: resolved 1 certificate(s)
2019-08-23 14:34:36 DEBUG XMLTooling.KeyInfoResolver.Inline [1222] [default]: resolved 0 CRL(s)
2019-08-23 14:34:36 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1222] [default]: signature verified against message issuer
2019-08-23 14:34:36 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1222] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 14:34:36 DEBUG Shibboleth.SSO.SAML2 [1222] [default]: SSO profile processing completed successfully
2019-08-23 14:34:36 DEBUG Shibboleth.SSO.SAML2 [1222] [default]: extracting pushed attributes...
2019-08-23 14:34:36 DEBUG Shibboleth.AttributeExtractor.XML [1222] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 14:34:36 DEBUG Shibboleth.AttributeDecoder.String [1222] [default]: decoding SimpleAttribute (mail-nameid) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress)
2019-08-23 14:34:36 DEBUG Shibboleth.AttributeExtractor.XML [1222] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 14:34:36 DEBUG Shibboleth.AttributeFilter [1222] [default]: filtering 1 attribute(s) from (https://sso-test.wku.edu:443/samlsso)
2019-08-23 14:34:36 DEBUG Shibboleth.AttributeFilter [1222] [default]: applying filtering rule(s) for attribute (mail-nameid) from (https://sso-test.wku.edu:443/samlsso)
2019-08-23 14:34:36 DEBUG Shibboleth.SessionCache [1222] [default]: creating new session
2019-08-23 14:34:36 DEBUG Shibboleth.SessionCache [1222] [default]: storing new session...
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: inserted record (session) in context (_946d5e3c3aa323a1c51ef42ca95f06f5) with expiration (1566574476)
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: inserted record (brent.haselhoff@wku.edu) in context (NameID) with expiration (1566599676)
2019-08-23 14:34:36 INFO Shibboleth.SessionCache [1222] [default]: new session created: ID (_946d5e3c3aa323a1c51ef42ca95f06f5) IdP (https://sso-test.wku.edu:443/samlsso) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.38.242)
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: deleted record (f17d48c18835dea367d7c7dcc0c99ba195ec072e9263ac41d9ac0b497e9560f6) in context (RelayState)
2019-08-23 14:34:36 DEBUG Shibboleth.SSO.SAML2 [1222] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 14:34:36 DEBUG Shibboleth.Listener [1222]: dispatching message (default::getHeaders::Application)
2019-08-23 14:34:36 DEBUG Shibboleth.Listener [1222] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: updated expiration of valid records in context (_946d5e3c3aa323a1c51ef42ca95f06f5) to (1566574476)
2019-08-23 14:34:36 DEBUG Shibboleth.Listener [1222] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 14:34:36 DEBUG XMLTooling.StorageService [1222] [default]: updated expiration of valid records in context (_946d5e3c3aa323a1c51ef42ca95f06f5) to (1566574476)
2019-08-23 14:34:43 INFO Shibboleth.Listener [1220]: detected socket closure, shutting down worker thread
2019-08-23 14:36:32 INFO Shibboleth.Listener [1222]: detected socket closure, shutting down worker thread
2019-08-23 14:38:58 DEBUG Shibboleth.Listener [1223] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:38:58 INFO OpenSAML.MetadataProvider.Dynamic [1223] [default]: resolving metadata for (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO)
2019-08-23 14:38:58 ERROR OpenSAML.MetadataProvider.Dynamic [1223] [default]: error while resolving (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO): Unable to access local file (/home/mdupload/76f417d1e56368834b2e8e17d261f87a36d3465e.xml)
2019-08-23 14:38:58 WARN Shibboleth.SessionInitiator.SAML2 [1223] [default]: unable to locate metadata for provider (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO)
2019-08-23 14:39:25 DEBUG Shibboleth.Listener [1219] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:39:25 INFO OpenSAML.MetadataProvider.Dynamic [1219] [default]: resolving metadata for (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO)
2019-08-23 14:39:25 ERROR OpenSAML.MetadataProvider.Dynamic [1219] [default]: error while resolving (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO): Unable to access local file (/home/mdupload/76f417d1e56368834b2e8e17d261f87a36d3465e.xml)
2019-08-23 14:39:25 WARN Shibboleth.SessionInitiator.SAML2 [1219] [default]: unable to locate metadata for provider (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO)
2019-08-23 14:39:43 DEBUG Shibboleth.Listener [1223] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:39:43 INFO OpenSAML.MetadataProvider.Dynamic [1223] [default]: resolving metadata for (https://webauth.dbs.ie/idhttps://webauth.dbs.ie/idp/profile/SAML2/POST/SSO?execution=e1s1p/profile/SAML2/POST/SSO)
2019-08-23 14:39:43 ERROR OpenSAML.MetadataProvider.Dynamic [1223] [default]: error while resolving (https://webauth.dbs.ie/idhttps://webauth.dbs.ie/idp/profile/SAML2/POST/SSO?execution=e1s1p/profile/SAML2/POST/SSO): Unable to access local file (/home/mdupload/82c6c82da589b3aa8f381d1b32fb0ba190f6b1c7.xml)
2019-08-23 14:39:43 WARN Shibboleth.SessionInitiator.SAML2 [1223] [default]: unable to locate metadata for provider (https://webauth.dbs.ie/idhttps://webauth.dbs.ie/idp/profile/SAML2/POST/SSO?execution=e1s1p/profile/SAML2/POST/SSO)
2019-08-23 14:40:02 DEBUG Shibboleth.Listener [1224] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:40:02 INFO OpenSAML.MetadataProvider.Dynamic [1224] [default]: resolving metadata for (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO?execution=e1s1)
2019-08-23 14:40:02 ERROR OpenSAML.MetadataProvider.Dynamic [1224] [default]: error while resolving (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO?execution=e1s1): Unable to access local file (/home/mdupload/f282ae77b5f412a2713040b4a765c0a22f7cd0b1.xml)
2019-08-23 14:40:02 WARN Shibboleth.SessionInitiator.SAML2 [1224] [default]: unable to locate metadata for provider (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO?execution=e1s1)
2019-08-23 14:40:09 DEBUG Shibboleth.Listener [1225] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:40:09 INFO OpenSAML.MetadataProvider.Dynamic [1225] [default]: resolving metadata for (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO)
2019-08-23 14:40:09 ERROR OpenSAML.MetadataProvider.Dynamic [1225] [default]: error while resolving (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO): Unable to access local file (/home/mdupload/76f417d1e56368834b2e8e17d261f87a36d3465e.xml)
2019-08-23 14:40:09 WARN Shibboleth.SessionInitiator.SAML2 [1225] [default]: unable to locate metadata for provider (https://webauth.dbs.ie/idp/profile/SAML2/POST/SSO)
2019-08-23 14:40:25 DEBUG Shibboleth.Listener [1224] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:40:25 INFO OpenSAML.MetadataProvider.Dynamic [1224] [default]: resolving metadata for (https://webauth.dbs.ie/idp/profile/SAML2)
2019-08-23 14:40:25 ERROR OpenSAML.MetadataProvider.Dynamic [1224] [default]: error while resolving (https://webauth.dbs.ie/idp/profile/SAML2): Unable to access local file (/home/mdupload/e4d70d878100697e7926a3ad02eefbefb6c7d762.xml)
2019-08-23 14:40:25 WARN Shibboleth.SessionInitiator.SAML2 [1224] [default]: unable to locate metadata for provider (https://webauth.dbs.ie/idp/profile/SAML2)
2019-08-23 14:45:25 INFO Shibboleth.Listener [1219]: detected socket closure, shutting down worker thread
2019-08-23 14:45:27 INFO Shibboleth.Listener [1223]: detected socket closure, shutting down worker thread
2019-08-23 14:45:56 DEBUG Shibboleth.Listener [1226] [default]: dispatching message (default/SAML2/POST)
2019-08-23 14:45:56 DEBUG OpenSAML.MessageDecoder.SAML2POST [1226] [default]: validating input
2019-08-23 14:45:56 WARN Shibboleth.SSO.SAML2 [1226] [default]: error processing incoming assertion: Invalid HTTP method (GET).
2019-08-23 14:46:02 INFO Shibboleth.Listener [1226]: detected socket closure, shutting down worker thread
2019-08-23 14:48:02 INFO XMLTooling.StorageService : purged 6 expired record(s) from storage
2019-08-23 14:49:35 INFO Shibboleth.Listener [1224]: detected socket closure, shutting down worker thread
2019-08-23 14:55:44 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 14:56:23 INFO Shibboleth.Listener [1225]: detected socket closure, shutting down worker thread
2019-08-23 14:57:18 DEBUG Shibboleth.Listener [1227] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:57:18 INFO OpenSAML.MetadataProvider.Dynamic [1227] [default]: resolving metadata for (https://ssoconnect.dermalogica.com/idp/shibboleth)
2019-08-23 14:57:18 ERROR OpenSAML.MetadataProvider.Dynamic [1227] [default]: error while resolving (https://ssoconnect.dermalogica.com/idp/shibboleth): Unable to access local file (/home/mdupload/a04c12822b173dedd8eee947bdb41fc68429c992.xml)
2019-08-23 14:57:18 WARN Shibboleth.SessionInitiator.SAML2 [1227] [default]: unable to locate metadata for provider (https://ssoconnect.dermalogica.com/idp/shibboleth)
2019-08-23 14:57:58 DEBUG Shibboleth.Listener [1227] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:57:58 INFO OpenSAML.MetadataProvider.Dynamic [1227] [default]: resolving metadata for (https://ssoconnect.dermalogica.com/idp/shibboleth)
2019-08-23 14:57:58 ERROR OpenSAML.MetadataProvider.Dynamic [1227] [default]: error while resolving (https://ssoconnect.dermalogica.com/idp/shibboleth): Unable to access local file (/home/mdupload/a04c12822b173dedd8eee947bdb41fc68429c992.xml)
2019-08-23 14:57:58 WARN Shibboleth.SessionInitiator.SAML2 [1227] [default]: unable to locate metadata for provider (https://ssoconnect.dermalogica.com/idp/shibboleth)
2019-08-23 14:58:36 DEBUG Shibboleth.Listener [1228] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 14:58:36 INFO OpenSAML.MetadataProvider.Dynamic [1228] [default]: resolving metadata for (https://dev-sso.dermalogica.com/idp/shibboleth)
2019-08-23 14:58:36 ERROR OpenSAML.MetadataProvider.Dynamic [1228] [default]: error while resolving (https://dev-sso.dermalogica.com/idp/shibboleth): Unable to access local file (/home/mdupload/5f92a8c73960ff84b4b2e6aeb36c6873d4bbac44.xml)
2019-08-23 14:58:36 WARN Shibboleth.SessionInitiator.SAML2 [1228] [default]: unable to locate metadata for provider (https://dev-sso.dermalogica.com/idp/shibboleth)
2019-08-23 15:00:04 INFO Shibboleth.Listener [1228]: detected socket closure, shutting down worker thread
2019-08-23 15:00:05 INFO Shibboleth.Listener [1227]: detected socket closure, shutting down worker thread
2019-08-23 15:03:01 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage
2019-08-23 15:18:00 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2019-08-23 15:25:43 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 15:30:03 DEBUG Shibboleth.Listener [1229] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 15:30:03 INFO OpenSAML.MetadataProvider.Dynamic [1229] [default]: resolving metadata for (localhost:8080/idp)
2019-08-23 15:30:03 ERROR OpenSAML.MetadataProvider.Dynamic [1229] [default]: error while resolving (localhost:8080/idp): Unable to access local file (/home/mdupload/a4d63a38bca0ea342409d1cd6cec9097880232f8.xml)
2019-08-23 15:30:03 WARN Shibboleth.SessionInitiator.SAML2 [1229] [default]: unable to locate metadata for provider (localhost:8080/idp)
2019-08-23 15:30:55 DEBUG Shibboleth.Listener [1230] [default]: dispatching message (default/SAML2/POST)
2019-08-23 15:30:55 DEBUG OpenSAML.MessageDecoder.SAML2POST [1230] [default]: validating input
2019-08-23 15:30:55 WARN Shibboleth.SSO.SAML2 [1230] [default]: error processing incoming assertion: Invalid HTTP method (GET).
2019-08-23 15:30:55 DEBUG Shibboleth.Listener [1231] [default]: dispatching message (default/SAML2/POST)
2019-08-23 15:30:55 DEBUG OpenSAML.MessageDecoder.SAML2POST [1231] [default]: validating input
2019-08-23 15:30:55 WARN Shibboleth.SSO.SAML2 [1231] [default]: error processing incoming assertion: Invalid HTTP method (GET).
2019-08-23 15:32:59 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage
2019-08-23 15:35:04 INFO Shibboleth.Listener [1231]: detected socket closure, shutting down worker thread
2019-08-23 15:35:14 INFO Shibboleth.Listener [1230]: detected socket closure, shutting down worker thread
2019-08-23 15:35:18 INFO Shibboleth.Listener [1229]: detected socket closure, shutting down worker thread
2019-08-23 15:47:59 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2019-08-23 15:55:42 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 15:56:24 DEBUG Shibboleth.Listener [1232] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 15:56:24 INFO OpenSAML.MetadataProvider.Dynamic [1232] [default]: resolving metadata for (https://ExampleIdentityProviderAlexTest)
2019-08-23 15:56:24 INFO OpenSAML.MetadataProvider.Dynamic [1232] [default]: caching resolved metadata for (https://ExampleIdentityProviderAlexTest)
2019-08-23 15:56:24 INFO OpenSAML.MetadataProvider.Dynamic [1232] [default]: next refresh of metadata for (https://ExampleIdentityProviderAlexTest) no sooner than 28800 seconds
2019-08-23 15:56:24 DEBUG XMLTooling.StorageService [1232] [default]: inserted record (93993bb401d66d366fd1e53f5e00825ce912e1f3483aae17d2175a43b8d43e41) in context (RelayState) with expiration (1566576384)
2019-08-23 15:56:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1232] [default]: validating input
2019-08-23 15:56:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1232] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 15:56:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1232] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://localhost:44390/SAML/SSOService.aspx" ID="_da858c9a3117266984a2eeb4915751a3" IssueInstant="2019-08-23T15:56:24Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 15:56:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1232] [default]: signing the message
2019-08-23 15:56:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1232] [default]: message encoded, sending redirect to client
2019-08-23 15:56:34 DEBUG Shibboleth.Listener [1233] [default]: dispatching message (default/SAML2/POST)
2019-08-23 15:56:34 DEBUG OpenSAML.MessageDecoder.SAML2POST [1233] [default]: validating input
2019-08-23 15:56:34 DEBUG OpenSAML.MessageDecoder.SAML2POST [1233] [default]: decoded SAML message:
<samlp:Response ID="_c1f9a5dd-80ee-40a0-a77d-0c4cb46d8e97" InResponseTo="_da858c9a3117266984a2eeb4915751a3" Version="2.0" IssueInstant="2019-08-23T15:56:34.231Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://ExampleIdentityProviderAlexTest</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status><saml:Assertion Version="2.0" ID="_4e44caf0-5fd4-4bed-9491-3dda2afefed2" IssueInstant="2019-08-23T15:56:34.231Z" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><saml:Issuer>https://ExampleIdentityProviderAlexTest</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testuser</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2019-08-23T15:59:34.231Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST" InResponseTo="_da858c9a3117266984a2eeb4915751a3" /></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2019-08-23T15:53:34.231Z" NotOnOrAfter="2019-08-23T15:59:34.231Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2019-08-23T15:56:34.231Z" SessionIndex="_4e44caf0-5fd4-4bed-9491-3dda2afefed2"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="GivenName"><saml:AttributeValue xsi:type="xs:string" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">Test</saml:AttributeValue></saml:Attribute><saml:Attribute Name="email"><saml:AttributeValue xsi:type="xs:string" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">a@test.com</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
2019-08-23 15:56:34 DEBUG OpenSAML.MessageDecoder.SAML2 [1233] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 15:56:34 DEBUG OpenSAML.MessageDecoder.SAML2 [1233] [default]: message from (https://ExampleIdentityProviderAlexTest)
2019-08-23 15:56:34 DEBUG OpenSAML.MessageDecoder.SAML2 [1233] [default]: searching metadata for message issuer...
2019-08-23 15:56:34 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1233] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 15:56:34 DEBUG XMLTooling.StorageService [1233] [default]: inserted record (_c1f9a5dd-80ee-40a0-a77d-0c4cb46d8e97) in context (MessageFlow) with expiration (1566576034)
2019-08-23 15:56:34 DEBUG Shibboleth.SSO.SAML2 [1233] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 15:56:34 DEBUG Shibboleth.SSO.SAML2 [1233] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 15:56:34 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1233] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 15:56:34 DEBUG XMLTooling.StorageService [1233] [default]: inserted record (_4e44caf0-5fd4-4bed-9491-3dda2afefed2) in context (MessageFlow) with expiration (1566576034)
2019-08-23 15:56:34 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1233] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 15:56:34 WARN Shibboleth.SSO.SAML2 [1233] [default]: detected a problem with assertion: Unable to establish security of incoming assertion.
2019-08-23 15:56:34 WARN Shibboleth.SSO.SAML2 [1233] [default]: error processing incoming assertion: Unable to establish security of incoming assertion.
2019-08-23 16:02:58 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2019-08-23 16:03:40 INFO Shibboleth.Listener [1232]: detected socket closure, shutting down worker thread
2019-08-23 16:07:32 INFO Shibboleth.Listener [1233]: detected socket closure, shutting down worker thread
2019-08-23 16:17:57 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage
2019-08-23 16:25:41 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 16:47:21 DEBUG Shibboleth.Listener [1234] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 16:47:21 DEBUG XMLTooling.StorageService [1234] [default]: inserted record (fcb53036455b830e3987aae4dca382a52b2eef33222a7ddb5acb7bdee2f167d2) in context (RelayState) with expiration (1566579441)
2019-08-23 16:47:21 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1234] [default]: validating input
2019-08-23 16:47:21 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1234] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 16:47:21 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1234] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://samltest.id/idp/profile/SAML2/Redirect/SSO" ID="_dde48f3347ace688f1c0150eb857ba1f" IssueInstant="2019-08-23T16:47:21Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 16:47:21 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1234] [default]: message encoded, sending redirect to client
2019-08-23 16:55:40 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 16:56:35 INFO Shibboleth.Listener [1234]: detected socket closure, shutting down worker thread
2019-08-23 17:02:54 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage
2019-08-23 17:25:40 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 17:55:39 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 17:57:24 DEBUG Shibboleth.Listener [1235] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 17:57:24 DEBUG XMLTooling.StorageService [1235] [default]: inserted record (5427920f04736fa1b1271b17a4f484c675133a8c6c3cf025c7da1947a0151f1b) in context (RelayState) with expiration (1566583644)
2019-08-23 17:57:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1235] [default]: validating input
2019-08-23 17:57:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1235] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 17:57:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1235] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://localhost:44390/SAML/SSOService.aspx" ID="_b8fb3052000f14c4659035f28880b1f3" IssueInstant="2019-08-23T17:57:24Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 17:57:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1235] [default]: signing the message
2019-08-23 17:57:24 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1235] [default]: message encoded, sending redirect to client
2019-08-23 18:01:45 DEBUG Shibboleth.Listener [1236] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 18:01:45 DEBUG XMLTooling.StorageService [1236] [default]: inserted record (3819a92e20d25be73444c48d8dbeae6a330aa56d1517a56a994c946bfa265e4f) in context (RelayState) with expiration (1566583905)
2019-08-23 18:01:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1236] [default]: validating input
2019-08-23 18:01:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1236] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 18:01:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1236] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://localhost:44390/SAML/SSOService.aspx" ID="_7d6bd8b58bf6f6774d697d993c1d0fd3" IssueInstant="2019-08-23T18:01:45Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 18:01:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1236] [default]: signing the message
2019-08-23 18:01:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1236] [default]: message encoded, sending redirect to client
2019-08-23 18:04:31 DEBUG Shibboleth.Listener [1237] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 18:04:31 DEBUG XMLTooling.StorageService [1237] [default]: inserted record (1d9a303c62b5d92ac9dfc605e0664f7441c092e367aa5ad748d41540caa5ecb0) in context (RelayState) with expiration (1566584071)
2019-08-23 18:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1237] [default]: validating input
2019-08-23 18:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1237] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 18:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1237] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://localhost:44390/SAML/SSOService.aspx" ID="_6b91e7d1982d9ecf2047904987a1a4d8" IssueInstant="2019-08-23T18:04:31Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 18:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1237] [default]: signing the message
2019-08-23 18:04:31 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1237] [default]: message encoded, sending redirect to client
2019-08-23 18:04:34 INFO Shibboleth.Listener [1235]: detected socket closure, shutting down worker thread
2019-08-23 18:05:46 DEBUG Shibboleth.Listener [1236] [default]: dispatching message (default/SAML2/POST)
2019-08-23 18:05:46 DEBUG OpenSAML.MessageDecoder.SAML2POST [1236] [default]: validating input
2019-08-23 18:05:46 DEBUG OpenSAML.MessageDecoder.SAML2POST [1236] [default]: decoded SAML message:
<samlp:Response ID="_e8b6fad5-c393-4cd0-b4a0-64f8033eca84" InResponseTo="_6b91e7d1982d9ecf2047904987a1a4d8" Version="2.0" IssueInstant="2019-08-23T18:05:46.9Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://ExampleIdentityProviderAlexTest</saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></samlp:Status><saml:Assertion Version="2.0" ID="_cb2bae74-0fe7-487c-ba01-a882974ed807" IssueInstant="2019-08-23T18:05:46.904Z" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><saml:Issuer>https://ExampleIdentityProviderAlexTest</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testuser</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2019-08-23T18:08:46.908Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST" InResponseTo="_6b91e7d1982d9ecf2047904987a1a4d8" /></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2019-08-23T18:02:46.905Z" NotOnOrAfter="2019-08-23T18:08:46.905Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2019-08-23T18:05:46.909Z" SessionIndex="_cb2bae74-0fe7-487c-ba01-a882974ed807"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="GivenName"><saml:AttributeValue xsi:type="xs:string" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">Test</saml:AttributeValue></saml:Attribute><saml:Attribute Name="email"><saml:AttributeValue xsi:type="xs:string" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">a@test.com</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
2019-08-23 18:05:46 DEBUG OpenSAML.MessageDecoder.SAML2 [1236] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 18:05:46 DEBUG OpenSAML.MessageDecoder.SAML2 [1236] [default]: message from (https://ExampleIdentityProviderAlexTest)
2019-08-23 18:05:46 DEBUG OpenSAML.MessageDecoder.SAML2 [1236] [default]: searching metadata for message issuer...
2019-08-23 18:05:46 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1236] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 18:05:46 DEBUG XMLTooling.StorageService [1236] [default]: inserted record (_e8b6fad5-c393-4cd0-b4a0-64f8033eca84) in context (MessageFlow) with expiration (1566583786)
2019-08-23 18:05:46 DEBUG Shibboleth.SSO.SAML2 [1236] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 18:05:46 DEBUG Shibboleth.SSO.SAML2 [1236] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 18:05:46 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1236] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 18:05:46 DEBUG XMLTooling.StorageService [1236] [default]: inserted record (_cb2bae74-0fe7-487c-ba01-a882974ed807) in context (MessageFlow) with expiration (1566583786)
2019-08-23 18:05:46 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1236] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 18:05:46 WARN Shibboleth.SSO.SAML2 [1236] [default]: detected a problem with assertion: Unable to establish security of incoming assertion.
2019-08-23 18:05:46 WARN Shibboleth.SSO.SAML2 [1236] [default]: error processing incoming assertion: Unable to establish security of incoming assertion.
2019-08-23 18:07:18 INFO Shibboleth.Listener [1237]: detected socket closure, shutting down worker thread
2019-08-23 18:07:19 INFO Shibboleth.Listener [1236]: detected socket closure, shutting down worker thread
2019-08-23 18:17:49 INFO XMLTooling.StorageService : purged 5 expired record(s) from storage
2019-08-23 18:25:38 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 18:25:45 DEBUG Shibboleth.Listener [1238] [default]: dispatching message (default/SAML2/POST)
2019-08-23 18:25:45 DEBUG OpenSAML.MessageDecoder.SAML2POST [1238] [default]: validating input
2019-08-23 18:25:45 DEBUG OpenSAML.MessageDecoder.SAML2POST [1238] [default]: decoded SAML message:
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_5e2ac530e14dc31c568f" Version="2.0" IssueInstant="2019-08-23T18:25:44Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://a-ci.labshare.org/_api/auth/ncats/samlsample</saml:Issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI="#_5e2ac530e14dc31c568f"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>Vp5fdENKquO4dIiYZJkHrenUZlHgWnIKGUXGpw+/nI4=</DigestValue></Reference></SignedInfo><SignatureValue>JDyMEIc8PZiNcS+ri6+O44773u/XGKemht+o493tOKz47Ka7ShpezFhbYJPvYl/PwSIEpIDWkCFSVVmUqRuua+IMKV+ImuQMzz0Hpa59ekkwh0gN1IHjHUhHloQ39X7Mox3TyI9b0+oCRnL2ciZAItpFRXUuGh3ZKK8VkXhdE3c=</SignatureValue><KeyInfo><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Version="2.0" ID="_rNXEeGxuKRJWRHybiVMwHYQMAHjGUVeM" IssueInstant="2019-08-23T18:25:44.958Z"><saml:Issuer>https://a-ci.labshare.org/_api/auth/ncats/samlsample</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">yuxin.kang@nih.gov</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2019-08-23T20:25:44.958Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2019-08-23T18:25:44.958Z" NotOnOrAfter="2019-08-23T20:25:44.958Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2019-08-23T18:25:44.958Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">yuxin.kang@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Kang, Yuxin (NIH/NCATS) [C]</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Yuxin</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Kang</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/upn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">kangy5@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/nameIdentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">kangy5@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">kangy5@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">CN=NIH O365 SSPR Open Registration,OU=O365,OU=ADOG,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS ITRB Contractors,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS ITRB Comprehensive,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS AWS Shared Services,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH O365 OD4B Users,OU=O365,OU=ADOG,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS DPI,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS 9800 Medical Center Drive,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Executive Office,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=LabShare Developers,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Jira Administrators,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Jira Users,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS-svpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS ITO Contractors,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS All Staff,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS IT Padawans,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS_Internet-svpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=UCC WebEx NCATS Users,OU=Groups,OU=CIT,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS_Internetvpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Users,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS-SCI-svpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS PRIMARY ACCOUNTS,OU=NIH SMARTCARD,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS SC LGNSCRIPT USER REQUIRED,OU=LGNSCRIPT USER REQUIRED GROUPS,OU=NIH SMARTCARD,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=BDSSenders,OU=Accounts,OU=CES,OU=OPS,DC=nih,DC=gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">yuxin.kang@nih.gov</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
2019-08-23 18:25:45 DEBUG OpenSAML.MessageDecoder.SAML2 [1238] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 18:25:45 DEBUG OpenSAML.MessageDecoder.SAML2 [1238] [default]: message from (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:25:45 DEBUG OpenSAML.MessageDecoder.SAML2 [1238] [default]: searching metadata for message issuer...
2019-08-23 18:25:45 INFO OpenSAML.MetadataProvider.Dynamic [1238] [default]: resolving metadata for (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:25:45 INFO OpenSAML.MetadataProvider.Dynamic [1238] [default]: caching resolved metadata for (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:25:45 INFO OpenSAML.MetadataProvider.Dynamic [1238] [default]: next refresh of metadata for (https://a-ci.labshare.org/_api/auth/ncats/samlsample) no sooner than 28800 seconds
2019-08-23 18:25:45 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1238] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 18:25:45 DEBUG XMLTooling.StorageService [1238] [default]: inserted record (_5e2ac530e14dc31c568f) in context (MessageFlow) with expiration (1566584984)
2019-08-23 18:25:45 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1238] [default]: validating signature profile
2019-08-23 18:25:45 DEBUG XMLTooling.KeyInfoResolver.Inline [1238] [default]: resolving ds:X509Certificate
2019-08-23 18:25:45 DEBUG XMLTooling.KeyInfoResolver.Inline [1238] [default]: resolved 1 certificate(s)
2019-08-23 18:25:45 DEBUG XMLTooling.KeyInfoResolver.Inline [1238] [default]: resolved 0 CRL(s)
2019-08-23 18:25:45 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1238] [default]: signature verified against message issuer
2019-08-23 18:25:45 DEBUG Shibboleth.SSO.SAML2 [1238] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 18:25:45 DEBUG Shibboleth.SSO.SAML2 [1238] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 18:25:45 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1238] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 18:25:45 DEBUG XMLTooling.StorageService [1238] [default]: inserted record (_rNXEeGxuKRJWRHybiVMwHYQMAHjGUVeM) in context (MessageFlow) with expiration (1566584984)
2019-08-23 18:25:45 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1238] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 18:25:45 DEBUG Shibboleth.SSO.SAML2 [1238] [default]: SSO profile processing completed successfully
2019-08-23 18:25:45 DEBUG Shibboleth.SSO.SAML2 [1238] [default]: extracting pushed attributes...
2019-08-23 18:25:45 DEBUG Shibboleth.AttributeExtractor.XML [1238] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2019-08-23 18:25:45 DEBUG Shibboleth.AttributeDecoder.NameID [1238] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2019-08-23 18:25:45 DEBUG Shibboleth.AttributeExtractor.XML [1238] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/upn
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/nameIdentifier
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/username
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/Group
2019-08-23 18:25:45 INFO Shibboleth.AttributeExtractor.XML [1238] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier
2019-08-23 18:25:45 DEBUG Shibboleth.AttributeFilter [1238] [default]: filtering 1 attribute(s) from (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:25:45 DEBUG Shibboleth.AttributeFilter [1238] [default]: applying filtering rule(s) for attribute (persistent-id) from (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:25:45 DEBUG Shibboleth.SessionCache [1238] [default]: creating new session
2019-08-23 18:25:45 DEBUG Shibboleth.SessionCache [1238] [default]: storing new session...
2019-08-23 18:25:45 DEBUG XMLTooling.StorageService [1238] [default]: inserted record (session) in context (_1ff85f4049666d7ff9264480cca0f2f4) with expiration (1566588345)
2019-08-23 18:25:45 DEBUG XMLTooling.StorageService [1238] [default]: inserted record (yuxin.kang@nih.gov) in context (NameID) with expiration (1566613545)
2019-08-23 18:25:45 INFO Shibboleth.SessionCache [1238] [default]: new session created: ID (_1ff85f4049666d7ff9264480cca0f2f4) IdP (https://a-ci.labshare.org/_api/auth/ncats/samlsample) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.38.242)
2019-08-23 18:25:45 DEBUG Shibboleth.SSO.SAML2 [1238] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 18:25:45 DEBUG Shibboleth.Listener [1238]: dispatching message (default::getHeaders::Application)
2019-08-23 18:25:45 DEBUG Shibboleth.Listener [1238] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 18:25:45 DEBUG XMLTooling.StorageService [1238] [default]: updated expiration of valid records in context (_1ff85f4049666d7ff9264480cca0f2f4) to (1566588345)
2019-08-23 18:25:46 DEBUG Shibboleth.Listener [1238] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 18:25:46 DEBUG XMLTooling.StorageService [1238] [default]: updated expiration of valid records in context (_1ff85f4049666d7ff9264480cca0f2f4) to (1566588346)
2019-08-23 18:30:18 DEBUG Shibboleth.Listener [1239] [default]: dispatching message (default/SAML2/POST)
2019-08-23 18:30:18 DEBUG OpenSAML.MessageDecoder.SAML2POST [1239] [default]: validating input
2019-08-23 18:30:18 DEBUG OpenSAML.MessageDecoder.SAML2POST [1239] [default]: decoded SAML message:
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="_ffa0b160a56812cb3d46" Version="2.0" IssueInstant="2019-08-23T18:30:17Z" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://a-ci.labshare.org/_api/auth/ncats/samlsample</saml:Issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI="#_ffa0b160a56812cb3d46"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>YmW/F7Pp53VS69fV6mFsSeCpmM2me3yP2SboA+7W6TM=</DigestValue></Reference></SignedInfo><SignatureValue>X0LbFEiqLHzlCw7M1sxweO1Vplk54DY4SxuUDNoGxViAJdx1O4ZSXbzlaami/Qjv2XNfK4zat7j+0PLcIgt2QxJm7/vS3WnsbgXOssI2Sumv/RZEdHPbRlzQAchd4eATtsgRrpuzMnoIIAgjPIzGiG3hJzQzYqHWhdaF9J1et1A=</SignatureValue><KeyInfo><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Version="2.0" ID="_e7pwcHykgDMWGjuxHLf9cmDC9zb3sLh9" IssueInstant="2019-08-23T18:30:17.885Z"><saml:Issuer>https://a-ci.labshare.org/_api/auth/ncats/samlsample</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">yuxin.kang@nih.gov</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2019-08-23T20:30:17.885Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2019-08-23T18:30:17.885Z" NotOnOrAfter="2019-08-23T20:30:17.885Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2019-08-23T18:30:17.885Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">yuxin.kang@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Kang, Yuxin (NIH/NCATS) [C]</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Yuxin</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Kang</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/upn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">kangy5@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/nameIdentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">kangy5@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">kangy5@nih.gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/claims/Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">CN=NIH O365 SSPR Open Registration,OU=O365,OU=ADOG,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS ITRB Comprehensive,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS ITRB Contractors,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS AWS Shared Services,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH O365 OD4B Users,OU=O365,OU=ADOG,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS DPI,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS 9800 Medical Center Drive,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Executive Office,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=LabShare Developers,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Jira Administrators,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Jira Users,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS-svpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS ITO Contractors,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS IT Padawans,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS All Staff,OU=Distribution Lists,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS_Internet-svpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=UCC WebEx NCATS Users,OU=Groups,OU=CIT,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS_Internetvpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS Users,OU=Groups,OU=NCATS,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NIH Grant-VPN NCATS-SCI-svpn,OU=Groups,OU=NIHRA,OU=ES,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS PRIMARY ACCOUNTS,OU=NIH SMARTCARD,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=NCATS SC LGNSCRIPT USER REQUIRED,OU=LGNSCRIPT USER REQUIRED GROUPS,OU=NIH SMARTCARD,OU=NIH,OU=AD,DC=nih,DC=gov</saml:AttributeValue><saml:AttributeValue xsi:type="xs:string">CN=BDSSenders,OU=Accounts,OU=CES,OU=OPS,DC=nih,DC=gov</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">yuxin.kang@nih.gov</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>
2019-08-23 18:30:18 DEBUG OpenSAML.MessageDecoder.SAML2 [1239] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 18:30:18 DEBUG OpenSAML.MessageDecoder.SAML2 [1239] [default]: message from (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:30:18 DEBUG OpenSAML.MessageDecoder.SAML2 [1239] [default]: searching metadata for message issuer...
2019-08-23 18:30:18 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1239] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 18:30:18 DEBUG XMLTooling.StorageService [1239] [default]: inserted record (_ffa0b160a56812cb3d46) in context (MessageFlow) with expiration (1566585257)
2019-08-23 18:30:18 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1239] [default]: validating signature profile
2019-08-23 18:30:18 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1239] [default]: signature verified against message issuer
2019-08-23 18:30:18 DEBUG Shibboleth.SSO.SAML2 [1239] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 18:30:18 DEBUG Shibboleth.SSO.SAML2 [1239] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 18:30:18 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1239] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 18:30:18 DEBUG XMLTooling.StorageService [1239] [default]: inserted record (_e7pwcHykgDMWGjuxHLf9cmDC9zb3sLh9) in context (MessageFlow) with expiration (1566585257)
2019-08-23 18:30:18 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1239] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 18:30:18 DEBUG Shibboleth.SSO.SAML2 [1239] [default]: SSO profile processing completed successfully
2019-08-23 18:30:18 DEBUG Shibboleth.SSO.SAML2 [1239] [default]: extracting pushed attributes...
2019-08-23 18:30:18 DEBUG Shibboleth.AttributeExtractor.XML [1239] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2019-08-23 18:30:18 DEBUG Shibboleth.AttributeDecoder.NameID [1239] [default]: decoding NameIDAttribute (persistent-id) from SAML 2 NameID with Format (urn:oasis:names:tc:SAML:2.0:nameid-format:persistent)
2019-08-23 18:30:18 DEBUG Shibboleth.AttributeExtractor.XML [1239] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/upn
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/nameIdentifier
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/username
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/claims/Group
2019-08-23 18:30:18 INFO Shibboleth.AttributeExtractor.XML [1239] [default]: skipping unmapped SAML 2.0 Attribute with Name: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier
2019-08-23 18:30:18 DEBUG Shibboleth.AttributeFilter [1239] [default]: filtering 1 attribute(s) from (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:30:18 DEBUG Shibboleth.AttributeFilter [1239] [default]: applying filtering rule(s) for attribute (persistent-id) from (https://a-ci.labshare.org/_api/auth/ncats/samlsample)
2019-08-23 18:30:18 DEBUG Shibboleth.SessionCache [1239] [default]: creating new session
2019-08-23 18:30:18 DEBUG Shibboleth.SessionCache [1239] [default]: storing new session...
2019-08-23 18:30:18 DEBUG XMLTooling.StorageService [1239] [default]: inserted record (session) in context (_44761453a4d1a05facf6b677fdca6f5b) with expiration (1566588618)
2019-08-23 18:30:18 DEBUG XMLTooling.StorageService [1239] [default]: updated record (yuxin.kang@nih.gov) in context (NameID) with expiration (1566613818)
2019-08-23 18:30:18 INFO Shibboleth.SessionCache [1239] [default]: new session created: ID (_44761453a4d1a05facf6b677fdca6f5b) IdP (https://a-ci.labshare.org/_api/auth/ncats/samlsample) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.38.242)
2019-08-23 18:30:18 DEBUG Shibboleth.SSO.SAML2 [1239] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 18:30:18 DEBUG Shibboleth.Listener [1239]: dispatching message (default::getHeaders::Application)
2019-08-23 18:30:18 DEBUG Shibboleth.Listener [1239] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 18:30:18 DEBUG XMLTooling.StorageService [1239] [default]: updated expiration of valid records in context (_44761453a4d1a05facf6b677fdca6f5b) to (1566588618)
2019-08-23 18:30:19 DEBUG Shibboleth.Listener [1239] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 18:30:19 DEBUG XMLTooling.StorageService [1239] [default]: updated expiration of valid records in context (_44761453a4d1a05facf6b677fdca6f5b) to (1566588619)
2019-08-23 18:32:48 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2019-08-23 18:37:00 INFO Shibboleth.Listener [1239]: detected socket closure, shutting down worker thread
2019-08-23 18:39:47 INFO Shibboleth.Listener [1238]: detected socket closure, shutting down worker thread
2019-08-23 18:47:47 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2019-08-23 18:55:38 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 19:06:55 DEBUG Shibboleth.Listener [1240] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 19:06:55 INFO OpenSAML.MetadataProvider.Dynamic [1240] [default]: resolving metadata for (Citrixsmb2.okta.com)
2019-08-23 19:06:55 ERROR OpenSAML.MetadataProvider.Dynamic [1240] [default]: error while resolving (Citrixsmb2.okta.com): Unable to access local file (/home/mdupload/1b973ef43e516ff2e6dd4bedc8b3ea6659af6917.xml)
2019-08-23 19:06:55 WARN Shibboleth.SessionInitiator.SAML2 [1240] [default]: unable to locate metadata for provider (Citrixsmb2.okta.com)
2019-08-23 19:11:50 DEBUG Shibboleth.Listener [1241] [default]: dispatching message (default/SAML2/POST)
2019-08-23 19:11:50 DEBUG OpenSAML.MessageDecoder.SAML2POST [1241] [default]: validating input
2019-08-23 19:11:50 WARN Shibboleth.SSO.SAML2 [1241] [default]: error processing incoming assertion: Invalid HTTP method (GET).
2019-08-23 19:11:50 DEBUG Shibboleth.Listener [1241] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 19:14:04 INFO Shibboleth.Listener [1241]: detected socket closure, shutting down worker thread
2019-08-23 19:14:05 INFO Shibboleth.Listener [1240]: detected socket closure, shutting down worker thread
2019-08-23 19:25:37 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 19:32:45 INFO XMLTooling.StorageService : purged 2 expired record(s) from storage
2019-08-23 19:42:26 DEBUG Shibboleth.Listener [1242] [default]: dispatching message (default/Login::run::SAML2SI)
2019-08-23 19:42:26 INFO OpenSAML.MetadataProvider.Dynamic [1242] [default]: resolving metadata for (https://sso-login.vanderbilt.edu)
2019-08-23 19:42:26 INFO OpenSAML.MetadataProvider.Dynamic [1242] [default]: caching resolved metadata for (https://sso-login.vanderbilt.edu)
2019-08-23 19:42:26 INFO OpenSAML.MetadataProvider.Dynamic [1242] [default]: next refresh of metadata for (https://sso-login.vanderbilt.edu) no sooner than 28800 seconds
2019-08-23 19:42:26 DEBUG XMLTooling.StorageService [1242] [default]: inserted record (27d177d429418da5e6c87a1afce23b2cea2b0e1e579ee4de76c850abf7331d9e) in context (RelayState) with expiration (1566589946)
2019-08-23 19:42:26 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1242] [default]: validating input
2019-08-23 19:42:26 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1242] [default]: marshalling, deflating, base64-encoding the message
2019-08-23 19:42:26 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1242] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://samltest.id/Shibboleth.sso/SAML2/POST" Destination="https://sso-login.vanderbilt.edu/idp/SSO.saml2" ID="_a7719117fef3edbf88fbcad9c179fed0" IssueInstant="2019-08-23T19:42:26Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://samltest.id/saml/sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2019-08-23 19:42:26 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1242] [default]: message encoded, sending redirect to client
2019-08-23 19:42:35 DEBUG Shibboleth.Listener [1243] [default]: dispatching message (default/SAML2/POST)
2019-08-23 19:42:35 DEBUG OpenSAML.MessageDecoder.SAML2POST [1243] [default]: validating input
2019-08-23 19:42:35 DEBUG OpenSAML.MessageDecoder.SAML2POST [1243] [default]: decoded SAML message:
<samlp:Response Version="2.0" ID="mqy3hupZSTEeZMGYK-5A6Fx31sF" IssueInstant="2019-08-23T19:42:35.661Z" InResponseTo="_a7719117fef3edbf88fbcad9c179fed0" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sso-login.vanderbilt.edu</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#mqy3hupZSTEeZMGYK-5A6Fx31sF">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>7kw00bABp4A8fakndp8WaeETr9tUDnqjlaCd3TclCn8=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Et/yp3TnAwSBiEU19Y6Y+4DD2kFuh/9U9mZ6nH9RcszykJd6wmZPu5h/MMi2l6qf832jE3T9IebX
fuuk/xxBgCm7YhfLkKrnctUJNtk1Ji6Z1QiXNs2U/vFHn75crwUbOitz+P2u5nj+odBQiu6Y6yKI
/iBkqI/flefnq5jYadlb8whdZNxr+YeQt521UlTOinZZkEQ9nFMUymUUNjNJuBtyAiDPa5ZG0aVx
KYKde3PFn/MAFAs4x81OFvsq+zv92UOgIEJCnHQEDUqdhIAovW4D0DhqH7oaDleqJ7Dd8lUac0In
0Y9cXGxiXSBKw8RXRdFKA+2AceJKMkYeAiMHiw==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
<ds:KeyValue>
<ds:RSAKeyValue>
<ds:Modulus>
gqN6hCEaPImeAfkC14jmt3CX1xHKaESEouGgct9o0q3/4zVuhYJV1GP6gosWTZRTs6JTwRinEp/f
dcIg2nZQK46b5fR20C0YdQgVOiHk0uiiTrGrm7RzcH5Sg+ToH+UYRFgmC4zG9xcr0qsvhfkF0r5v
e1EFkKFEZUivb5MfLlYyDWDmkpWx1EicqWPArrXw3WaHYc1v2Q9mAEAO1f7WLBqvp29+tq4GLcWS
mKIcgu1GPb2/lgw/UYu8EJzXTag0sp/OsUVtpE8rhfgDqJ0/Cwe7asdjIQQlnOsoSUKGNkA3C3FT
BQ80b8lN/hh0+hzkUNVbGsKcZHhjTzu+qUL53Q==
</ds:Modulus>
<ds:Exponent>AQAB</ds:Exponent>
</ds:RSAKeyValue>
</ds:KeyValue>
</ds:KeyInfo>
</ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:AuthnFailed"/></samlp:StatusCode><samlp:StatusMessage>Authentication Failed</samlp:StatusMessage><samlp:StatusDetail><Cause>org.sourceid.websso.profiles.idp.FailedAuthnSsoException</Cause></samlp:StatusDetail></samlp:Status></samlp:Response>
2019-08-23 19:42:35 DEBUG OpenSAML.MessageDecoder.SAML2 [1243] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 19:42:35 DEBUG OpenSAML.MessageDecoder.SAML2 [1243] [default]: message from (https://sso-login.vanderbilt.edu)
2019-08-23 19:42:35 DEBUG OpenSAML.MessageDecoder.SAML2 [1243] [default]: searching metadata for message issuer...
2019-08-23 19:42:35 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1243] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 19:42:35 DEBUG XMLTooling.StorageService [1243] [default]: inserted record (mqy3hupZSTEeZMGYK-5A6Fx31sF) in context (MessageFlow) with expiration (1566589595)
2019-08-23 19:42:35 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1243] [default]: validating signature profile
2019-08-23 19:42:35 DEBUG XMLTooling.KeyInfoResolver.Inline [1243] [default]: resolving ds:X509Certificate
2019-08-23 19:42:35 DEBUG XMLTooling.KeyInfoResolver.Inline [1243] [default]: resolved 1 certificate(s)
2019-08-23 19:42:35 DEBUG XMLTooling.KeyInfoResolver.Inline [1243] [default]: resolved 0 CRL(s)
2019-08-23 19:42:35 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1243] [default]: signature verified against message issuer
2019-08-23 19:42:35 DEBUG Shibboleth.SSO.SAML2 [1243] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 19:42:35 WARN Shibboleth.SSO.SAML2 [1243] [default]: error processing incoming assertion: SAML response reported an IdP error.
2019-08-23 19:43:35 DEBUG Shibboleth.Listener [1244] [default]: dispatching message (default/SAML2/POST)
2019-08-23 19:43:35 DEBUG OpenSAML.MessageDecoder.SAML2POST [1244] [default]: validating input
2019-08-23 19:43:35 DEBUG OpenSAML.MessageDecoder.SAML2POST [1244] [default]: decoded SAML message:
<samlp:Response Version="2.0" ID="iV4tsGAvGF8fWcHSDl7peZm.ick" IssueInstant="2019-08-23T19:43:35.302Z" InResponseTo="_a7719117fef3edbf88fbcad9c179fed0" Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sso-login.vanderbilt.edu</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#iV4tsGAvGF8fWcHSDl7peZm.ick">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>m1ejgB/His279IgjyAsSh+LUScnEozo82vNzC53KbkI=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
GRQuCSqC61yuCTdwiNRg9jCPRSc4oUkWojblqcz/OnMfeGDM5BxoPJsv4k95q8z/eYRByM9fCPr/
qn4+Njt5rR9noLLbhtEto0VuO5S0bmwHDtu70dVn4M1jTKLy/H0FMGzLJK8mC1hgd9wfyT6PLq7I
jruDiwpHjRo1kPC493pjsvq9+QcjeTJLPM+fr8eYi8AeAzBmKzuz2Y5+pZqPHNBDXt2w5GTmKn0k
GLXwn3BdumVnyOFVlD25XTkHJz/otfAxAvFgu8NoDcL5rs1GDuvEYWCzbTgqYUwppfjeKDFEWBks
vrXd0gLMBfK8w2hW+qDpnA88IHb1Y1nS33uxKw==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
<ds:KeyValue>
<ds:RSAKeyValue>
<ds:Modulus>
gqN6hCEaPImeAfkC14jmt3CX1xHKaESEouGgct9o0q3/4zVuhYJV1GP6gosWTZRTs6JTwRinEp/f
dcIg2nZQK46b5fR20C0YdQgVOiHk0uiiTrGrm7RzcH5Sg+ToH+UYRFgmC4zG9xcr0qsvhfkF0r5v
e1EFkKFEZUivb5MfLlYyDWDmkpWx1EicqWPArrXw3WaHYc1v2Q9mAEAO1f7WLBqvp29+tq4GLcWS
mKIcgu1GPb2/lgw/UYu8EJzXTag0sp/OsUVtpE8rhfgDqJ0/Cwe7asdjIQQlnOsoSUKGNkA3C3FT
BQ80b8lN/hh0+hzkUNVbGsKcZHhjTzu+qUL53Q==
</ds:Modulus>
<ds:Exponent>AQAB</ds:Exponent>
</ds:RSAKeyValue>
</ds:KeyValue>
</ds:KeyInfo>
</ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion ID="hXHzrkaRmkwIutFj1IgXuceUUO8" IssueInstant="2019-08-23T19:43:35.319Z" Version="2.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><saml:Issuer>https://sso-login.vanderbilt.edu</saml:Issuer><saml:Subject><saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">brewerel</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST" NotOnOrAfter="2019-08-23T19:48:35.319Z" InResponseTo="_a7719117fef3edbf88fbcad9c179fed0"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2019-08-23T19:38:35.319Z" NotOnOrAfter="2019-08-23T19:48:35.319Z"><saml:AudienceRestriction><saml:Audience>https://samltest.id/saml/sp</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement SessionIndex="hXHzrkaRmkwIutFj1IgXuceUUO8" AuthnInstant="2019-08-23T19:42:35.483Z"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement></saml:Assertion></samlp:Response>
2019-08-23 19:43:35 DEBUG OpenSAML.MessageDecoder.SAML2 [1244] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 19:43:35 DEBUG OpenSAML.MessageDecoder.SAML2 [1244] [default]: message from (https://sso-login.vanderbilt.edu)
2019-08-23 19:43:35 DEBUG OpenSAML.MessageDecoder.SAML2 [1244] [default]: searching metadata for message issuer...
2019-08-23 19:43:35 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1244] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: inserted record (iV4tsGAvGF8fWcHSDl7peZm.ick) in context (MessageFlow) with expiration (1566589655)
2019-08-23 19:43:35 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1244] [default]: validating signature profile
2019-08-23 19:43:35 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1244] [default]: signature verified against message issuer
2019-08-23 19:43:35 DEBUG Shibboleth.SSO.SAML2 [1244] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 19:43:35 DEBUG Shibboleth.SSO.SAML2 [1244] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 19:43:35 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1244] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: inserted record (hXHzrkaRmkwIutFj1IgXuceUUO8) in context (MessageFlow) with expiration (1566589655)
2019-08-23 19:43:35 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1244] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 19:43:35 DEBUG Shibboleth.SSO.SAML2 [1244] [default]: SSO profile processing completed successfully
2019-08-23 19:43:35 DEBUG Shibboleth.SSO.SAML2 [1244] [default]: extracting pushed attributes...
2019-08-23 19:43:35 DEBUG Shibboleth.AttributeExtractor.XML [1244] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2019-08-23 19:43:35 DEBUG Shibboleth.AttributeExtractor.XML [1244] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified)
2019-08-23 19:43:35 DEBUG Shibboleth.AttributeExtractor.XML [1244] [default]: unable to extract attributes, unknown XML object type: saml:AuthnStatement
2019-08-23 19:43:35 DEBUG Shibboleth.SessionCache [1244] [default]: creating new session
2019-08-23 19:43:35 DEBUG Shibboleth.SessionCache [1244] [default]: storing new session...
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: inserted record (session) in context (_c72518a980596bf9c2c97e90f1f04723) with expiration (1566593015)
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: inserted record (brewerel) in context (NameID) with expiration (1566618215)
2019-08-23 19:43:35 INFO Shibboleth.SessionCache [1244] [default]: new session created: ID (_c72518a980596bf9c2c97e90f1f04723) IdP (https://sso-login.vanderbilt.edu) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: deleted record (27d177d429418da5e6c87a1afce23b2cea2b0e1e579ee4de76c850abf7331d9e) in context (RelayState)
2019-08-23 19:43:35 DEBUG Shibboleth.SSO.SAML2 [1244] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 19:43:35 DEBUG Shibboleth.Listener [1244]: dispatching message (default::getHeaders::Application)
2019-08-23 19:43:35 DEBUG Shibboleth.Listener [1244] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: updated expiration of valid records in context (_c72518a980596bf9c2c97e90f1f04723) to (1566593015)
2019-08-23 19:43:35 DEBUG Shibboleth.Listener [1244] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 19:43:35 DEBUG XMLTooling.StorageService [1244] [default]: updated expiration of valid records in context (_c72518a980596bf9c2c97e90f1f04723) to (1566593015)
2019-08-23 19:47:45 INFO XMLTooling.StorageService : purged 3 expired record(s) from storage
2019-08-23 19:51:15 INFO Shibboleth.Listener [1243]: detected socket closure, shutting down worker thread
2019-08-23 19:51:17 INFO Shibboleth.Listener [1242]: detected socket closure, shutting down worker thread
2019-08-23 19:51:20 INFO Shibboleth.Listener [1244]: detected socket closure, shutting down worker thread
2019-08-23 19:55:36 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 20:17:44 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage
2019-08-23 20:25:35 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 20:32:43 INFO XMLTooling.StorageService : purged 4 expired record(s) from storage
2019-08-23 20:47:42 INFO XMLTooling.StorageService : purged 5 expired record(s) from storage
2019-08-23 20:55:07 DEBUG Shibboleth.Listener [1245] [default]: dispatching message (default/SAML2/POST)
2019-08-23 20:55:07 DEBUG OpenSAML.MessageDecoder.SAML2POST [1245] [default]: validating input
2019-08-23 20:55:07 DEBUG OpenSAML.MessageDecoder.SAML2POST [1245] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_8216009633d4e9415b26188636269d96" IssueInstant="2019-08-23T20:55:06.945Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_8216009633d4e9415b26188636269d96">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>G2Jd3+Y+qRc+YPiDmpRWpriifQCcTmG2b6OBwOmYYt/ncznUabPS2Hvh+ZSAnYBt//VvnRbUE1r4
hWjsp5VoxA==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
H6pqs8Xa3zo8KVPW6qN9lCL+7wG8uSNQ72OweBofNmFasjqosKCNlyB+5LXr+nv8gqE8KiKYgLnz
RY/qhl93UtubQPZbZgz0JIlf6ARxPqmAAqBibxin7DgyPbgJ5Ak+lh93PEErJ+3c5THI1AybspdP
WtIhWmSiE0fh4hhd/7JqrYD9g82OuDuWERLGxiV6T1FpknWgIpSGNDjq90xOADZtpymvtvHELq53
soKHbZGpEaCVB1mwgcpPeDIf1WgYZ532Ct/4FniGfrtHiiBpFdSs/DuNlNpi41trVmMebJY7Sp5B
SGpYVGKTGUjo80ozTvI1eP6ujvaqtox1ZNFUFQ==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_8c85419f6b88e8c80904d3b39b1dcde8" IssueInstant="2019-08-23T20:55:06.945Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_8c85419f6b88e8c80904d3b39b1dcde8">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>3wN1sya1EuSUF3y9H2Zhg0wVGodauwkQ796X8VqTQm0ZHhI5RTnEKmSv03K2ju5Qk7ADE6xrbBNh
Gd2IUojoKQ==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
MZ+CdXkrPUQpxKJ3cdqgKI8sZbdbCENAWYmVAq08u6Ssd9qc1xjn80q7BGpwlcO+hB/GusXtdJXg
ubuueDbt2lyFmUh/VsVHAPvhi8z6KGNwI2kI/2wr/9jMvsgj8Ssr2HMPADw6x5joHJDg+UteJsMK
ExGCD/tZlY0/mnpLrQiiCLdK/jZovDSqjwOeQGY8eEVLJU+8ZOzwVx370vn2w0VMfvkC1Uhpq8kE
NPgiS/ZZTCNiA9+ficESuZx58OYAe9f4BPu1fyXSyjXskTyG2modJsGQ2KfDy64DcMGzHbDl70ic
I9C3y0rsCAabs4sfaJyiddTM5qOEGesDsAxiqg==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idpinternal.sentry.com/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp">AAdzZWNyZXQxN9pl8a4X5cil2zQmNCvyRThZJ5KreVtlzUrNoTxLg1XpIJms6eFji6dCfEARPHLPETuiKD+IW9E4vOdDC88OpwaYBKG+PrsjeZEA/jv6W8p2gvCOIAkd9sBkl/1v</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.75.17.11" NotOnOrAfter="2019-08-23T21:00:06.951Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T20:55:06.945Z" NotOnOrAfter="2019-08-23T21:00:06.945Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T20:55:06.934Z" SessionIndex="_098644f6bf3cf368e382a5e7ea0d9986"><saml2:SubjectLocality Address="10.75.17.11"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="ShadowAccountName" Name="ShadowAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">081662</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-08-23 20:55:07 DEBUG OpenSAML.MessageDecoder.SAML2 [1245] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 20:55:07 DEBUG OpenSAML.MessageDecoder.SAML2 [1245] [default]: message from (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 20:55:07 DEBUG OpenSAML.MessageDecoder.SAML2 [1245] [default]: searching metadata for message issuer...
2019-08-23 20:55:07 INFO OpenSAML.MetadataProvider.Dynamic [1245] [default]: resolving metadata for (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 20:55:07 INFO OpenSAML.MetadataProvider.Dynamic [1245] [default]: caching resolved metadata for (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 20:55:07 INFO OpenSAML.MetadataProvider.Dynamic [1245] [default]: next refresh of metadata for (https://idpinternal.sentry.com/idp/shibboleth) no sooner than 28800 seconds
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1245] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 20:55:07 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (_8216009633d4e9415b26188636269d96) in context (MessageFlow) with expiration (1566593946)
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: validating signature profile
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolving ds:X509Certificate
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolved 1 certificate(s)
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolved 0 CRL(s)
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolving ds:X509Certificate
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolved 1 certificate(s)
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolved 0 CRL(s)
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolving ds:X509Certificate
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolved 1 certificate(s)
2019-08-23 20:55:07 DEBUG XMLTooling.KeyInfoResolver.Inline [1245] [default]: resolved 0 CRL(s)
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: signature verified against message issuer
2019-08-23 20:55:07 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 20:55:07 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1245] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 20:55:07 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (_8c85419f6b88e8c80904d3b39b1dcde8) in context (MessageFlow) with expiration (1566593946)
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: validating signature profile
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: signature verified against message issuer
2019-08-23 20:55:07 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1245] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 20:55:07 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: SSO profile processing completed successfully
2019-08-23 20:55:07 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: extracting pushed attributes...
2019-08-23 20:55:07 DEBUG Shibboleth.AttributeExtractor.XML [1245] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 20:55:07 DEBUG Shibboleth.AttributeExtractor.XML [1245] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 20:55:07 DEBUG Shibboleth.AttributeExtractor.XML [1245] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 20:55:07 INFO Shibboleth.AttributeExtractor.XML [1245] [default]: skipping unmapped SAML 2.0 Attribute with Name: ShadowAccountName
2019-08-23 20:55:07 DEBUG Shibboleth.SessionCache [1245] [default]: creating new session
2019-08-23 20:55:07 DEBUG Shibboleth.SessionCache [1245] [default]: storing new session...
2019-08-23 20:55:07 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (session) in context (_f76c3bd6332f94c67ae2fe79ca032363) with expiration (1566597307)
2019-08-23 20:55:07 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (AAdzZWNyZXQxN9pl8a4X5cil2zQmNCvyRThZJ5KreVtlzUrNoTxLg1XpIJms6eFji6dCfEARPHLPETuiKD+IW9E4vOdDC88OpwaYBKG+PrsjeZEA/jv6W8p2gvCOIAkd9sBkl/1v) in context (NameID) with expiration (1566622507)
2019-08-23 20:55:07 INFO Shibboleth.SessionCache [1245] [default]: new session created: ID (_f76c3bd6332f94c67ae2fe79ca032363) IdP (https://idpinternal.sentry.com/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 20:55:07 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 20:55:07 DEBUG Shibboleth.Listener [1245]: dispatching message (default::getHeaders::Application)
2019-08-23 20:55:07 DEBUG Shibboleth.Listener [1245] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 20:55:07 DEBUG XMLTooling.StorageService [1245] [default]: updated expiration of valid records in context (_f76c3bd6332f94c67ae2fe79ca032363) to (1566597307)
2019-08-23 20:55:08 DEBUG Shibboleth.Listener [1245] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 20:55:08 DEBUG XMLTooling.StorageService [1245] [default]: updated expiration of valid records in context (_f76c3bd6332f94c67ae2fe79ca032363) to (1566597308)
2019-08-23 20:55:08 DEBUG Shibboleth.Listener [1246] [default]: dispatching message (default/SAML2/POST)
2019-08-23 20:55:08 DEBUG OpenSAML.MessageDecoder.SAML2POST [1246] [default]: validating input
2019-08-23 20:55:08 DEBUG OpenSAML.MessageDecoder.SAML2POST [1246] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_09a225553602ad8a942a174bf7bcf3ee" IssueInstant="2019-08-23T20:55:08.073Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_09a225553602ad8a942a174bf7bcf3ee">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>uPJuP4F3f6aMW2ZX0URzeC5tuv0PqGyIFaq+4cs43n4bLmIMSybjBAPH6fD5WUsn/NaBtHHC+DAF
yJXJr3CY8g==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Gwgs7hQKCCRYWIyr8PkLmue2HpSvscQmY+YjWFjmvZgBu05YNZInfT6BEl8CvGSbr/GCMxewSaLv
ijr0wRT11XdFEGFDQusjmdrXJZG70FyMu8k8dF3JSiANGhSaAu/A28v3KgCHnf211QbyGOVEdhrQ
8WbN1CV6A2naFiposo1NIIdYUfYZ7te+s0M8wIiPRHsbTrHhQRBA3RlZPqOMViNHrjer7VhTZj77
Bix6oftUofi/TFKYKRxBtVUgWK4vEXK5ciC91NNNKSqqstmfKXIkJoo5ciqATD0uoXsCndMvR07Q
SL6mnGTgRZeaL00IzGoN92J4D1RZvSO1Kvki3w==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd
BgNVBAMMFmlkcGludGVybmFsLnNlbnRyeS5jb20wHhcNMTkwMzI3MTI0ODUyWhcNMzkwMzI3MTI0
ODUyWjAhMR8wHQYDVQQDDBZpZHBpbnRlcm5hbC5zZW50cnkuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwzY5ixydL7wFL6fnAsmjxRkEWJUAFbiuQg5gBt0MCcUnz6JElTaqhovz
surS0SRyUnO9KNhzIJd/bL5LZCCfL+NEkBz1DlHL+mSXbRFkAHEyTq4RCPATPFlCvGXYWLqSeikX
12dFSvV8sh2w2EAyLvcjRA7MzQ13ZyAnbKZKBoKL7dEe7OAc2cepiOyQm4FPYJgwH2st1m0MDWVx
XAheY+4/Dc9tfl02D+bILRSDBualeMsy7PgikyJBTMItlb4JbUbXBLfSw1KZlRgOUDTcsfrxHhcQ
tD1LhwLb4o9h5dIuLLgvKbCu4qZCAf9iehS2ANjxMuRpCVtLJjR2UehDHwIDAQABo3MwcTAdBgNV
HQ4EFgQU7Zi0WquTn/vXClUMObdCtTuUbUYwUAYDVR0RBEkwR4IWaWRwaW50ZXJuYWwuc2VudHJ5
LmNvbYYtaHR0cHM6Ly9pZHBpbnRlcm5hbC5zZW50cnkuY29tL2lkcC9zaGliYm9sZXRoMA0GCSqG
SIb3DQEBCwUAA4IBAQAj5/fJ3VG26RdzTzhgzSMgpMvcZ9f6n4ANwtijQuHb6Vypr4zftKGkjJcK
Zx8Zi7TqfmdUECbXVjloGgvITSBDG7lZf2mbwphO8Ekqow4kDPmN3khfAbEIXBKmAiEc2BsP2/lZ
cUBvipu0w2rJm3rEQOu9ZJYDipg7b4u4Tv4J8BjUs9KucLDIb9YGInMQCE1YfSWT398DjWT0eiEf
G4svpBkkNvonTB4vXWsqXrWqn8M7s1uBfqeOzvvU/uoE65/ElUwf1EHG4hMHeAZq0B1nPZVjiuAa
S2q/3dpkiFaHq1aYxTdHZ+IT8NUQQQvRh2KgRNKOADL2OwXt+zE84WcT</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_72fb19ac7dfc9d904c2eb16f5078b6f9" IssueInstant="2019-08-23T20:55:08.073Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_72fb19ac7dfc9d904c2eb16f5078b6f9">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>F8jbFIyowif4dLLQqT4PM9AoMEUjoWYbgvukddLxncB2DV986M08KKSb/0plrbz2XqcOQAU0gU4p
Du8+aQNRlw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
X+5yshJHOiq7H7Z43SIjmfSm3PYWpijdolbx9W6KsBuP4xS8PL5C+TGy3c3/0Aw/4HmFb631IdpI
XJNJPzKOcRNGlTVm+KYPDwx+YnBG9Q3TrzO5BVFe0xBw8O4HKjYluXFLCY4EoYR+T4OiFUHxHKzF
qGlFl5O5WPDw5IpSMJZ5KFxXYb9CC7xVMduznpZVOMa2RdUa891yYc8ZHuZOqK8drs9gDBQd3SmL
9sCM+hJrLPv/ipJdvRx4ePRqxWC0pR2AfNVvzvbfolPR3hqRzm+pHrAry96zTMhLjQmkk+/kw66F
y+c9ClA6SwviNdJHgt5OnyEEyMuKM8huhtgqFA==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idpinternal.sentry.com/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp">AAdzZWNyZXQxfFORFXymI123/qLdG55IgMcInO+4lZwFK21gc1HB+3i9rcyHJvHCDSxjaIdaOwhE5voSIKosu+YakfccUl9qFrg/AWjw3SQL+jAYIzHRLQIs8S7DtUGlddeQkHeb</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.75.17.11" NotOnOrAfter="2019-08-23T21:00:08.079Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T20:55:08.073Z" NotOnOrAfter="2019-08-23T21:00:08.073Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T20:55:08.064Z" SessionIndex="_1c1ccdc218a32e4f0233a737d6e14941"><saml2:SubjectLocality Address="10.75.17.11"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="ShadowAccountName" Name="ShadowAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">081662</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-08-23 20:55:08 DEBUG OpenSAML.MessageDecoder.SAML2 [1246] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 20:55:08 DEBUG OpenSAML.MessageDecoder.SAML2 [1246] [default]: message from (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 20:55:08 DEBUG OpenSAML.MessageDecoder.SAML2 [1246] [default]: searching metadata for message issuer...
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1246] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 20:55:08 DEBUG XMLTooling.StorageService [1246] [default]: inserted record (_09a225553602ad8a942a174bf7bcf3ee) in context (MessageFlow) with expiration (1566593948)
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1246] [default]: validating signature profile
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1246] [default]: signature verified against message issuer
2019-08-23 20:55:08 DEBUG Shibboleth.SSO.SAML2 [1246] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 20:55:08 DEBUG Shibboleth.SSO.SAML2 [1246] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1246] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 20:55:08 DEBUG XMLTooling.StorageService [1246] [default]: inserted record (_72fb19ac7dfc9d904c2eb16f5078b6f9) in context (MessageFlow) with expiration (1566593948)
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1246] [default]: validating signature profile
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1246] [default]: signature verified against message issuer
2019-08-23 20:55:08 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1246] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 20:55:08 DEBUG Shibboleth.SSO.SAML2 [1246] [default]: SSO profile processing completed successfully
2019-08-23 20:55:08 DEBUG Shibboleth.SSO.SAML2 [1246] [default]: extracting pushed attributes...
2019-08-23 20:55:08 DEBUG Shibboleth.AttributeExtractor.XML [1246] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 20:55:08 DEBUG Shibboleth.AttributeExtractor.XML [1246] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 20:55:08 DEBUG Shibboleth.AttributeExtractor.XML [1246] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 20:55:08 INFO Shibboleth.AttributeExtractor.XML [1246] [default]: skipping unmapped SAML 2.0 Attribute with Name: ShadowAccountName
2019-08-23 20:55:08 DEBUG Shibboleth.SessionCache [1246] [default]: creating new session
2019-08-23 20:55:08 DEBUG Shibboleth.SessionCache [1246] [default]: storing new session...
2019-08-23 20:55:08 DEBUG XMLTooling.StorageService [1246] [default]: inserted record (session) in context (_a1b0d9d4933635598451e08d0cdf362b) with expiration (1566597308)
2019-08-23 20:55:08 DEBUG XMLTooling.StorageService [1246] [default]: inserted record (AAdzZWNyZXQxfFORFXymI123/qLdG55IgMcInO+4lZwFK21gc1HB+3i9rcyHJvHCDSxjaIdaOwhE5voSIKosu+YakfccUl9qFrg/AWjw3SQL+jAYIzHRLQIs8S7DtUGlddeQkHeb) in context (NameID) with expiration (1566622508)
2019-08-23 20:55:08 INFO Shibboleth.SessionCache [1246] [default]: new session created: ID (_a1b0d9d4933635598451e08d0cdf362b) IdP (https://idpinternal.sentry.com/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 20:55:08 DEBUG Shibboleth.SSO.SAML2 [1246] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 20:55:08 DEBUG Shibboleth.Listener [1246]: dispatching message (default::getHeaders::Application)
2019-08-23 20:55:08 DEBUG Shibboleth.Listener [1246] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 20:55:08 DEBUG XMLTooling.StorageService [1246] [default]: updated expiration of valid records in context (_a1b0d9d4933635598451e08d0cdf362b) to (1566597308)
2019-08-23 20:55:09 DEBUG Shibboleth.Listener [1246] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1246] [default]: updated expiration of valid records in context (_a1b0d9d4933635598451e08d0cdf362b) to (1566597308)
2019-08-23 20:55:09 DEBUG Shibboleth.Listener [1245] [default]: dispatching message (default/SAML2/POST)
2019-08-23 20:55:09 DEBUG OpenSAML.MessageDecoder.SAML2POST [1245] [default]: validating input
2019-08-23 20:55:09 DEBUG OpenSAML.MessageDecoder.SAML2POST [1245] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_43c5f95c1da2308312a5e996d0a2f50e" IssueInstant="2019-08-23T20:55:09.055Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_43c5f95c1da2308312a5e996d0a2f50e">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>IP5OM8L85Ca/p+ebj+k5CwKp8hiAMbcM9chXPT7N/LlMDzj+ixUBXpDaHrT+t9IVHCevHCL5hZSi
BhjewSXKOQ==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
c5k4zdjaf2SiK9WaQV7QX00miqhKRqlMK3GUpbeK18KM3B9rmgyHaf5UMrNhRvn/FYcl0IZRk7AJ
lKB0G8shmzCWO4JQU75QwQfkklo7uBCoVwHVfbg2+vheYVqS+BgZkIEHuMVP7xuNn/+LwIa/crTK
g+g5BWDh7C4FIh/ZrRAWsZ8DVF7rMGhiaJjgyhg60Ts35rBNyNAAENsi4tllNMmQE8Os/vC6vF6f
qFQ+UYXch+m1/HaBV8c0WjtWbUZQ9r5/Ut/uGWsmS6P17tKpbis0sOInBY8kQ8ub/h6f+p8F8dxQ
EGGgXUvOGyZJ/fw3xtApxyyIWqn8vYPlPc0YrQ==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_bc5f64eccf01a18bc0314802517243af" IssueInstant="2019-08-23T20:55:09.055Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_bc5f64eccf01a18bc0314802517243af">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>+Xx0eWj+SR69C+HX2rcSfJw/wPEu/zPMLKEnakQ/4+90Yl5qDwRjzngfAkSFrPV2t8+ZAVx2Plg8
ShBUQHV9yg==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
mdLGETKSd4+R3GI60GGMrwF/u4p6zEmQjgwhXwhH7lKbK48EOfoK7/+fJqaSmKAaLyhzppHxKakn
/PtJgoHMP7Brz8/g4ZrgrGYkCWXJ33T3XoeJVkrxmK3jwXhz34JsNb7HfPJpNObu44Mqqsk4tA0g
itUsSL9cX9PssIYZTJRUILFCDSAd78hyydj8mVk2y2r4OcJ80fKUUePPN93j3B7kmlL9EFW12YK0
ipiQDYHMRArgnehbkUOykpKYtyphn9Fc5vdWQhRkuLn0Xw1NKXXqObISpHmR/C7OYF1wybbn0eWj
HdU5jnISheGFBVQloCJN/O3IzGqmQ5rLWyPznQ==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idpinternal.sentry.com/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp">AAdzZWNyZXQxNa3+yPguEkaN5nEcObqIAF8jRAd1+XiJ585+L/u084Rgd5M623G+X7dTwuApq2f38mJUdOjx304vZH6EfIRFhx9V9HMuGpKIkw3a5zRBI2A3lLte3hSPihdVa5e/</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.173.80.117" NotOnOrAfter="2019-08-23T21:00:09.059Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T20:55:09.055Z" NotOnOrAfter="2019-08-23T21:00:09.055Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T20:55:09.052Z" SessionIndex="_73c367429b3f3ed647828c3f940685da"><saml2:SubjectLocality Address="10.173.80.117"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="ShadowAccountName" Name="ShadowAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">081662</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-08-23 20:55:09 DEBUG OpenSAML.MessageDecoder.SAML2 [1245] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 20:55:09 DEBUG OpenSAML.MessageDecoder.SAML2 [1245] [default]: message from (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 20:55:09 DEBUG OpenSAML.MessageDecoder.SAML2 [1245] [default]: searching metadata for message issuer...
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1245] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (_43c5f95c1da2308312a5e996d0a2f50e) in context (MessageFlow) with expiration (1566593949)
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: validating signature profile
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: signature verified against message issuer
2019-08-23 20:55:09 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 20:55:09 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1245] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (_bc5f64eccf01a18bc0314802517243af) in context (MessageFlow) with expiration (1566593949)
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: validating signature profile
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1245] [default]: signature verified against message issuer
2019-08-23 20:55:09 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1245] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 20:55:09 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: SSO profile processing completed successfully
2019-08-23 20:55:09 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: extracting pushed attributes...
2019-08-23 20:55:09 DEBUG Shibboleth.AttributeExtractor.XML [1245] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 20:55:09 DEBUG Shibboleth.AttributeExtractor.XML [1245] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 20:55:09 DEBUG Shibboleth.AttributeExtractor.XML [1245] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 20:55:09 INFO Shibboleth.AttributeExtractor.XML [1245] [default]: skipping unmapped SAML 2.0 Attribute with Name: ShadowAccountName
2019-08-23 20:55:09 DEBUG Shibboleth.SessionCache [1245] [default]: creating new session
2019-08-23 20:55:09 DEBUG Shibboleth.SessionCache [1245] [default]: storing new session...
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (session) in context (_c0f22137cbe92c4e725273f4c4686d5e) with expiration (1566597309)
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1245] [default]: inserted record (AAdzZWNyZXQxNa3+yPguEkaN5nEcObqIAF8jRAd1+XiJ585+L/u084Rgd5M623G+X7dTwuApq2f38mJUdOjx304vZH6EfIRFhx9V9HMuGpKIkw3a5zRBI2A3lLte3hSPihdVa5e/) in context (NameID) with expiration (1566622509)
2019-08-23 20:55:09 INFO Shibboleth.SessionCache [1245] [default]: new session created: ID (_c0f22137cbe92c4e725273f4c4686d5e) IdP (https://idpinternal.sentry.com/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 20:55:09 DEBUG Shibboleth.SSO.SAML2 [1245] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 20:55:09 DEBUG Shibboleth.Listener [1245] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1245] [default]: updated expiration of valid records in context (_c0f22137cbe92c4e725273f4c4686d5e) to (1566597309)
2019-08-23 20:55:09 DEBUG Shibboleth.Listener [1245] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 20:55:09 DEBUG XMLTooling.StorageService [1245] [default]: updated expiration of valid records in context (_c0f22137cbe92c4e725273f4c4686d5e) to (1566597309)
2019-08-23 20:55:34 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 21:02:41 INFO XMLTooling.StorageService : purged 6 expired record(s) from storage
2019-08-23 21:08:02 DEBUG Shibboleth.Listener [1247] [default]: dispatching message (default/SAML2/POST)
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2POST [1247] [default]: validating input
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2POST [1247] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_392df2b1edf7bd6cad2f4ea761a09576" IssueInstant="2019-08-23T21:08:01.799Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_392df2b1edf7bd6cad2f4ea761a09576">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>AGKNnmji0uz+x0Cs+DxKre1BvECAzIqf9I9ezv8KcNOoAxIauOQeO5NvmOXQJbXpaPA9ZPaBb6A7
5bdJYEBRLg==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
t7ksJnabau8JGji8GArsa3Lau28oJ2Nu3ELQIIN/yUJWVjKRsm4HoHDBeTqSCU7dUM76h+OfrlV2
fXyiSvHAIST3IqMc7Kr5BeCNq5t9mIUFefsrgittRmCe5zUMZs2H5W4IwRy+cvFgGqmbeUp/tnsT
7HpDHydYQpogprffIjeDcokHivYtL9lVbtysy3cA5pQKYHDycwmu0EaJYoyb+VV0M1V4vBCf0+56
oykK/wK8xXYGCJQsIw13si92nStzzG8Ar0V55GDnTzunpPW2fGBP/zryIdUZx2WYeKgfgpWS5lZf
H7DL2A15S6Z/8LH4W8eNItZdUSzRgN4PmbmQPg==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_c770e87284313c220dff748ded867f88" IssueInstant="2019-08-23T21:08:01.799Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_c770e87284313c220dff748ded867f88">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>7Mupe1p1kc8DwhiyIyjUOOe2aikYFDRr1ltP1dfEkiaCpSbQSOZm1oQCsNuzzaGI9xiJW67v6pwD
+JS1MyD9Rw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
KBH08TtAbnLbCKXPYUvaR/9mNBWY/22/hpfczw8fS5G5vp/Y8+cj9lPDOzyisqxLhTOmLFCUSxTw
hy1ydfPl85yRNF5I8jtiRWRnMnZ35kdbg1whX7ueJf41z8a3JAJO7iwNEjTt8HD6flFVrdsYJgqa
mivSTNYLJofsLpMUbWobpPBfzf+50YmUunEBYyNm2ghU7CwUjoUrUIhs0QeH3nZ6RRXrOhH5KmMZ
0+/Fkzw4polikBk2OhmIEqF0Ad9ImiWDxIIVgoqvd2lDdSQg1of3dE6pbUwjYsslvJRqqf+2pRY7
kJ0v4LHICkQwsEhxaornqPEV8B36ztsAtRnYgg==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd
BgNVBAMMFmlkcGludGVybmFsLnNlbnRyeS5jb20wHhcNMTkwMzI3MTI0ODUyWhcNMzkwMzI3MTI0
ODUyWjAhMR8wHQYDVQQDDBZpZHBpbnRlcm5hbC5zZW50cnkuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwzY5ixydL7wFL6fnAsmjxRkEWJUAFbiuQg5gBt0MCcUnz6JElTaqhovz
surS0SRyUnO9KNhzIJd/bL5LZCCfL+NEkBz1DlHL+mSXbRFkAHEyTq4RCPATPFlCvGXYWLqSeikX
12dFSvV8sh2w2EAyLvcjRA7MzQ13ZyAnbKZKBoKL7dEe7OAc2cepiOyQm4FPYJgwH2st1m0MDWVx
XAheY+4/Dc9tfl02D+bILRSDBualeMsy7PgikyJBTMItlb4JbUbXBLfSw1KZlRgOUDTcsfrxHhcQ
tD1LhwLb4o9h5dIuLLgvKbCu4qZCAf9iehS2ANjxMuRpCVtLJjR2UehDHwIDAQABo3MwcTAdBgNV
HQ4EFgQU7Zi0WquTn/vXClUMObdCtTuUbUYwUAYDVR0RBEkwR4IWaWRwaW50ZXJuYWwuc2VudHJ5
LmNvbYYtaHR0cHM6Ly9pZHBpbnRlcm5hbC5zZW50cnkuY29tL2lkcC9zaGliYm9sZXRoMA0GCSqG
SIb3DQEBCwUAA4IBAQAj5/fJ3VG26RdzTzhgzSMgpMvcZ9f6n4ANwtijQuHb6Vypr4zftKGkjJcK
Zx8Zi7TqfmdUECbXVjloGgvITSBDG7lZf2mbwphO8Ekqow4kDPmN3khfAbEIXBKmAiEc2BsP2/lZ
cUBvipu0w2rJm3rEQOu9ZJYDipg7b4u4Tv4J8BjUs9KucLDIb9YGInMQCE1YfSWT398DjWT0eiEf
G4svpBkkNvonTB4vXWsqXrWqn8M7s1uBfqeOzvvU/uoE65/ElUwf1EHG4hMHeAZq0B1nPZVjiuAa
S2q/3dpkiFaHq1aYxTdHZ+IT8NUQQQvRh2KgRNKOADL2OwXt+zE84WcT</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idpinternal.sentry.com/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp">AAdzZWNyZXQxtI45CcfKX5s7lIjnnL9jGmFJ8VDVi3EftWfH1DGCIu38JcVRIeDJoOmUurUU2LwNPNCcO73kXLQILg6bm7oS257RTFDYmyShAj6INacqHRYM5w2gv1thxePpHHe/</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.3.96.44" NotOnOrAfter="2019-08-23T21:13:01.808Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T21:08:01.799Z" NotOnOrAfter="2019-08-23T21:13:01.799Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T21:08:01.795Z" SessionIndex="_381debecae132966461496dc1a554c34"><saml2:SubjectLocality Address="10.3.96.44"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="ShadowAccountName" Name="ShadowAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">081662</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2 [1247] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2 [1247] [default]: message from (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2 [1247] [default]: searching metadata for message issuer...
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1247] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (_392df2b1edf7bd6cad2f4ea761a09576) in context (MessageFlow) with expiration (1566594721)
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: validating signature profile
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: signature verified against message issuer
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1247] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (_c770e87284313c220dff748ded867f88) in context (MessageFlow) with expiration (1566594721)
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: validating signature profile
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: signature verified against message issuer
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1247] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: SSO profile processing completed successfully
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: extracting pushed attributes...
2019-08-23 21:08:02 DEBUG Shibboleth.AttributeExtractor.XML [1247] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 21:08:02 DEBUG Shibboleth.AttributeExtractor.XML [1247] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 21:08:02 DEBUG Shibboleth.AttributeExtractor.XML [1247] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 21:08:02 INFO Shibboleth.AttributeExtractor.XML [1247] [default]: skipping unmapped SAML 2.0 Attribute with Name: ShadowAccountName
2019-08-23 21:08:02 DEBUG Shibboleth.SessionCache [1247] [default]: creating new session
2019-08-23 21:08:02 DEBUG Shibboleth.SessionCache [1247] [default]: storing new session...
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (session) in context (_bee5f854559e3dcc20a59086588496a4) with expiration (1566598082)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (AAdzZWNyZXQxtI45CcfKX5s7lIjnnL9jGmFJ8VDVi3EftWfH1DGCIu38JcVRIeDJoOmUurUU2LwNPNCcO73kXLQILg6bm7oS257RTFDYmyShAj6INacqHRYM5w2gv1thxePpHHe/) in context (NameID) with expiration (1566623282)
2019-08-23 21:08:02 INFO Shibboleth.SessionCache [1247] [default]: new session created: ID (_bee5f854559e3dcc20a59086588496a4) IdP (https://idpinternal.sentry.com/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 21:08:02 DEBUG Shibboleth.Listener [1247] [default]: dispatching message (default/SAML2/POST)
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2POST [1247] [default]: validating input
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2POST [1247] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_2c31884d3a419ec46476b706f6b8cddd" IssueInstant="2019-08-23T21:08:01.777Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_2c31884d3a419ec46476b706f6b8cddd">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>xRbWKSqv1uKmPHj1I0GhKxZsXu6WaNHqe3RT3C3QxKvOYO8bFVvYjGAaAcbWfnmte3I4oqxtzI9N
vGcVRYYslw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
MZdrz/F6EcUKHRWxDo8dEjisObpB0/8/cp2MJvF2c6eA+6D7D/dHcZ5im+YHO2XWWZf7NDAyfyq3
aUWOknyBYJWP/e+eumO91aXgSVMLiRyGxOC3jGvBnCfHKUBINfgUzmZfvMx1X+ZGS21+7gS6Huiw
08lCkaox1D3Fv+lWxp1lrq3+Q7GFf1BwB80j9YNeVA/e0EMXcJCT5VuSoXASFEqVCNBTuAYxTyrU
F+eHqTGenUgZN6t/xQEULBstIuqOX6qCRDfwI3eNQbW68dMaLrHFOKs0XBCszgBpid7HYErgx96S
WJ2yi91otP7ccTIcaq9H2sNhOS8VyrArkwUWiw==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_03ad045a2109bc8e918d998a4888d7a9" IssueInstant="2019-08-23T21:08:01.777Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_03ad045a2109bc8e918d998a4888d7a9">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>N7qZtGHLV11oP/KmtMWJjnSh7Rxv7ZLh2JClZv1UCL3VMjy3doeQKGzz5jSDPa3/FM4k4Y668wEa
o5nKvr8cvg==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
QAmy6/j7Tx9nU19X4A70fKA8sqGeFKbKt/AdIrTMoVzIIhtHdXJWCzuRiwSxxlkwV1VFhbk7s3ku
Arti9I1f84K4YuXra9mhxDjsG4E6i83qyJwxmFrI7YSF0Y5c7Wv5I7DwHbNyl3/avKnF1P1n2yKP
fPbFG7k7jbjCDi7qOp9bP/BY2KX+haMpbLfxJZxinrmmoJmRyf8Wqcsv24qnSynjNkJi/nqMtK65
tGvoSOdVCrVowzQRwivyYHNE2fl6ox9XlKqHMlps5gKwXqZ8fowH/mT9MUc+d2SI41oJlSnx38Vh
bt55f1lRbZa9VFdFllKMPwovTqHOq/xTIY+yWg==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idpinternal.sentry.com/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp">AAdzZWNyZXQxV9ASaK9o9iSTVT1qGshe9+njdB/nBIrj02AGVoND/t99L/8bBMJto97CyqHO9rcC9WczU/nsR0ye2MVH7GSbjA7hXjKgLTiQjuiE2E+I1ItKAEQhzM4Rjxo3f4ms</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.173.80.117" NotOnOrAfter="2019-08-23T21:13:01.784Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T21:08:01.777Z" NotOnOrAfter="2019-08-23T21:13:01.777Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T21:08:01.774Z" SessionIndex="_d1b1c1b2c7d17303f0ecb6da825c4382"><saml2:SubjectLocality Address="10.173.80.117"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="ShadowAccountName" Name="ShadowAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">081662</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2 [1247] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2 [1247] [default]: message from (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 21:08:02 DEBUG OpenSAML.MessageDecoder.SAML2 [1247] [default]: searching metadata for message issuer...
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1247] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (_2c31884d3a419ec46476b706f6b8cddd) in context (MessageFlow) with expiration (1566594721)
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: validating signature profile
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: signature verified against message issuer
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1247] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (_03ad045a2109bc8e918d998a4888d7a9) in context (MessageFlow) with expiration (1566594721)
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: validating signature profile
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1247] [default]: signature verified against message issuer
2019-08-23 21:08:02 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1247] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: SSO profile processing completed successfully
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: extracting pushed attributes...
2019-08-23 21:08:02 DEBUG Shibboleth.AttributeExtractor.XML [1247] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 21:08:02 DEBUG Shibboleth.AttributeExtractor.XML [1247] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 21:08:02 DEBUG Shibboleth.AttributeExtractor.XML [1247] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 21:08:02 INFO Shibboleth.AttributeExtractor.XML [1247] [default]: skipping unmapped SAML 2.0 Attribute with Name: ShadowAccountName
2019-08-23 21:08:02 DEBUG Shibboleth.SessionCache [1247] [default]: creating new session
2019-08-23 21:08:02 DEBUG Shibboleth.SessionCache [1247] [default]: storing new session...
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (session) in context (_a5b19ab2a1a7319957d8bb96f87617c3) with expiration (1566598082)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: inserted record (AAdzZWNyZXQxV9ASaK9o9iSTVT1qGshe9+njdB/nBIrj02AGVoND/t99L/8bBMJto97CyqHO9rcC9WczU/nsR0ye2MVH7GSbjA7hXjKgLTiQjuiE2E+I1ItKAEQhzM4Rjxo3f4ms) in context (NameID) with expiration (1566623282)
2019-08-23 21:08:02 INFO Shibboleth.SessionCache [1247] [default]: new session created: ID (_a5b19ab2a1a7319957d8bb96f87617c3) IdP (https://idpinternal.sentry.com/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 21:08:02 DEBUG Shibboleth.SSO.SAML2 [1247] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 21:08:02 DEBUG Shibboleth.Listener [1247]: dispatching message (default::getHeaders::Application)
2019-08-23 21:08:02 DEBUG Shibboleth.Listener [1247] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 21:08:02 DEBUG XMLTooling.StorageService [1247] [default]: updated expiration of valid records in context (_bee5f854559e3dcc20a59086588496a4) to (1566598082)
2019-08-23 21:08:03 DEBUG Shibboleth.Listener [1248] [default]: dispatching message (default/SAML2/POST)
2019-08-23 21:08:03 DEBUG OpenSAML.MessageDecoder.SAML2POST [1248] [default]: validating input
2019-08-23 21:08:03 DEBUG OpenSAML.MessageDecoder.SAML2POST [1248] [default]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response Destination="https://samltest.id/Shibboleth.sso/SAML2/POST" ID="_10b57afdeb55f1d7eb7e38474a86db7e" IssueInstant="2019-08-23T21:08:01.785Z" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_10b57afdeb55f1d7eb7e38474a86db7e">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>e25ky/LHKXs6lT1WpoKag0benH7+nmvyCS1aZVnQIfwcoRWC9Sw/aUn7CcXpSu7qaYl47OVQDJrd
JQIenJkiaQ==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
XnW+OY+WdYgUIUXjcjQyqdvwQ3S/vH/aIxWQHMDg67e8F7/NWJ+tl5+uyFMSJKwktFzQR/DZSMSl
sK1aZ0HCKzSXGgblNCyGC8QWyAX/DApGq7c4AM1HAxY/pOoLCsQ7/V/jyOQxkFsDDcCekXYG9auA
4CPnHpzRJL1uJ2YJCBaB6o8RQIgecaBvsXDnNUKoQ6W3Aak+aSc+Xz1W3nwXNz5fGOkkBlYYwqIQ
fdPeU/NaiqG9a4MBaa3mtmpbYC7xVqOsC2beY54CUKh82R4AnNHXlFX7lsr1komUl3+qM6f4cC+x
Ou0Eg2UwvOjaWcw8TByrupzu9YBWY19ZSV8c2Q==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><saml2:Assertion ID="_d5ff6e840818021a6e03568f4dc12fd6" IssueInstant="2019-08-23T21:08:01.785Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><saml2:Issuer>https://idpinternal.sentry.com/idp/shibboleth</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<ds:Reference URI="#_d5ff6e840818021a6e03568f4dc12fd6">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<ds:DigestValue>NvUL4mgxlZFmXTju+nUN5oWglNqT3s1BugNeVHEH2A9IUmMByuvWC9gqlf4TLwAbO3YuY/026PXy
sPf30FwzYw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
S57QzDLBL5Gl8dgKUSMKWSNh6nBH2nruocgXksbPU5oLOk/mF1WmmUfuUdSmVaJqgSMyvF/A6JS7
/oTcMsTDU75meEsc62zxJEL8tSNCwsDxPW4Es+Umg8i3GKhxUpG8q4/pVF3KvrI85xKvkyslmes/
dCEze00pMNC0aElqfEimYjN6UdQixW5WuTrx0ssKxTKY0uYJWhC5aEnfbA/oFwpXkwgoZ/uywk+E
Hch4KM4EIKPODkmbexESvZ2La8sINm/ZRWCufnMIESgAXZH4xWPH1Rz7t7UXDL2GOUgxkltfR2aR
Y7BRMHurm2eBDvEoVe6gEq72VAOmpJPfJdMS7Q==
</ds:SignatureValue>
<ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDRDCCAiygAwIBAgIVAIO6b0WL5aciNZkEhSqc/4i2e5eVMA0GCSqGSIb3DQEBCwUAMCExHzAd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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:Subject><saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" NameQualifier="https://idpinternal.sentry.com/idp/shibboleth" SPNameQualifier="https://samltest.id/saml/sp">AAdzZWNyZXQxwjsBUjPMOQUKbPxdKQEH5DFMetJrsGcOraVH/JOv38GT8Th7eD1IjhUlna0BUTf+w0GA2dasTpP7BWEWzQUWHfBkkJ5hum1+NN8tj/LOeBGFrNNmvKleMlsnthM1</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData Address="10.3.96.44" NotOnOrAfter="2019-08-23T21:13:01.789Z" Recipient="https://samltest.id/Shibboleth.sso/SAML2/POST"/></saml2:SubjectConfirmation></saml2:Subject><saml2:Conditions NotBefore="2019-08-23T21:08:01.785Z" NotOnOrAfter="2019-08-23T21:13:01.785Z"><saml2:AudienceRestriction><saml2:Audience>https://samltest.id/saml/sp</saml2:Audience></saml2:AudienceRestriction></saml2:Conditions><saml2:AuthnStatement AuthnInstant="2019-08-23T21:08:01.782Z" SessionIndex="_814d6f6b4ffadbb1b4ab38652bf9da9e"><saml2:SubjectLocality Address="10.3.96.44"/><saml2:AuthnContext><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></saml2:AuthnContext></saml2:AuthnStatement><saml2:AttributeStatement><saml2:Attribute FriendlyName="ShadowAccountName" Name="ShadowAccountName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">081662</saml2:AttributeValue></saml2:Attribute></saml2:AttributeStatement></saml2:Assertion></saml2p:Response>
2019-08-23 21:08:03 DEBUG OpenSAML.MessageDecoder.SAML2 [1248] [default]: extracting issuer from SAML 2.0 protocol message
2019-08-23 21:08:03 DEBUG OpenSAML.MessageDecoder.SAML2 [1248] [default]: message from (https://idpinternal.sentry.com/idp/shibboleth)
2019-08-23 21:08:03 DEBUG OpenSAML.MessageDecoder.SAML2 [1248] [default]: searching metadata for message issuer...
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1248] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1248] [default]: inserted record (_10b57afdeb55f1d7eb7e38474a86db7e) in context (MessageFlow) with expiration (1566594721)
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1248] [default]: validating signature profile
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1248] [default]: signature verified against message issuer
2019-08-23 21:08:03 DEBUG Shibboleth.SSO.SAML2 [1248] [default]: processing message against SAML 2.0 SSO profile
2019-08-23 21:08:03 DEBUG Shibboleth.SSO.SAML2 [1248] [default]: extracting issuer from SAML 2.0 assertion
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1248] [default]: evaluating message flow policy (replay checking on, expiration 60)
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1248] [default]: inserted record (_d5ff6e840818021a6e03568f4dc12fd6) in context (MessageFlow) with expiration (1566594721)
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1248] [default]: validating signature profile
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1248] [default]: signature verified against message issuer
2019-08-23 21:08:03 DEBUG OpenSAML.SecurityPolicyRule.BearerConfirmation [1248] [default]: assertion satisfied bearer confirmation requirements
2019-08-23 21:08:03 DEBUG Shibboleth.SSO.SAML2 [1248] [default]: SSO profile processing completed successfully
2019-08-23 21:08:03 DEBUG Shibboleth.SSO.SAML2 [1248] [default]: extracting pushed attributes...
2019-08-23 21:08:03 DEBUG Shibboleth.AttributeExtractor.XML [1248] [default]: unable to extract attributes, unknown XML object type: saml2p:Response
2019-08-23 21:08:03 DEBUG Shibboleth.AttributeExtractor.XML [1248] [default]: skipping unmapped NameID with format (urn:oasis:names:tc:SAML:2.0:nameid-format:transient)
2019-08-23 21:08:03 DEBUG Shibboleth.AttributeExtractor.XML [1248] [default]: unable to extract attributes, unknown XML object type: saml2:AuthnStatement
2019-08-23 21:08:03 INFO Shibboleth.AttributeExtractor.XML [1248] [default]: skipping unmapped SAML 2.0 Attribute with Name: ShadowAccountName
2019-08-23 21:08:03 DEBUG Shibboleth.SessionCache [1248] [default]: creating new session
2019-08-23 21:08:03 DEBUG Shibboleth.SessionCache [1248] [default]: storing new session...
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1248] [default]: inserted record (session) in context (_08727d249bd09711dad35c8ed57df8f0) with expiration (1566598083)
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1248] [default]: inserted record (AAdzZWNyZXQxwjsBUjPMOQUKbPxdKQEH5DFMetJrsGcOraVH/JOv38GT8Th7eD1IjhUlna0BUTf+w0GA2dasTpP7BWEWzQUWHfBkkJ5hum1+NN8tj/LOeBGFrNNmvKleMlsnthM1) in context (NameID) with expiration (1566623283)
2019-08-23 21:08:03 INFO Shibboleth.SessionCache [1248] [default]: new session created: ID (_08727d249bd09711dad35c8ed57df8f0) IdP (https://idpinternal.sentry.com/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (172.31.7.69)
2019-08-23 21:08:03 DEBUG Shibboleth.SSO.SAML2 [1248] [default]: ACS returning via redirect to: https://samltest.id/saml-test
2019-08-23 21:08:03 DEBUG Shibboleth.Listener [1248]: dispatching message (default::getHeaders::Application)
2019-08-23 21:08:03 DEBUG Shibboleth.Listener [1247] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1247] [default]: updated expiration of valid records in context (_a5b19ab2a1a7319957d8bb96f87617c3) to (1566598083)
2019-08-23 21:08:03 DEBUG Shibboleth.Listener [1248] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1248] [default]: updated expiration of valid records in context (_08727d249bd09711dad35c8ed57df8f0) to (1566598083)
2019-08-23 21:08:03 DEBUG Shibboleth.Listener [1249]: dispatching message (default::getHeaders::Application)
2019-08-23 21:08:03 DEBUG Shibboleth.Listener [1249] [default]: dispatching message (find::StorageService::SessionCache)
2019-08-23 21:08:03 DEBUG XMLTooling.StorageService [1249] [default]: updated expiration of valid records in context (_08727d249bd09711dad35c8ed57df8f0) to (1566598083)
2019-08-23 21:08:04 DEBUG Shibboleth.Listener [1248] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 21:08:04 DEBUG XMLTooling.StorageService [1248] [default]: updated expiration of valid records in context (_08727d249bd09711dad35c8ed57df8f0) to (1566598084)
2019-08-23 21:08:04 DEBUG Shibboleth.Listener [1249] [default]: dispatching message (touch::StorageService::SessionCache)
2019-08-23 21:08:04 DEBUG XMLTooling.StorageService [1249] [default]: updated expiration of valid records in context (_08727d249bd09711dad35c8ed57df8f0) to (1566598084)
2019-08-23 21:08:42 INFO Shibboleth.Listener [1248]: detected socket closure, shutting down worker thread
2019-08-23 21:17:40 INFO XMLTooling.StorageService : purged 6 expired record(s) from storage
2019-08-23 21:19:04 INFO Shibboleth.Listener [1247]: detected socket closure, shutting down worker thread
2019-08-23 21:19:05 INFO Shibboleth.Listener [1245]: detected socket closure, shutting down worker thread
2019-08-23 21:23:23 INFO Shibboleth.Listener [1246]: detected socket closure, shutting down worker thread
2019-08-23 21:23:25 INFO Shibboleth.Listener [1249]: detected socket closure, shutting down worker thread
2019-08-23 21:25:33 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 21:55:33 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 22:02:37 INFO XMLTooling.StorageService : purged 3 expired record(s) from storage
2019-08-23 22:17:36 INFO XMLTooling.StorageService : purged 3 expired record(s) from storage
2019-08-23 22:25:32 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...
2019-08-23 22:47:35 INFO XMLTooling.StorageService : purged 1 expired record(s) from storage
2019-08-23 22:55:31 INFO OpenSAML.MetadataProvider.Dynamic [Dynamic]: cleaning dynamic metadata cache...