tomcat_sandbox1 | 2019-12-12 19:57:46,806 DEBUG [org.apereo.cas.web.flow.login.InitialFlowSetupAction] - <Setting path for cookies for warn cookie generator to: [/cas/]>
tomcat_sandbox1 | 2019-12-12 19:57:46,807 DEBUG [org.apereo.cas.web.flow.login.InitialFlowSetupAction] - <Setting path for cookies for TGC cookie generator to: [/cas/]>
tomcat_sandbox1 | 2019-12-12 19:57:46,813 DEBUG [org.apereo.cas.web.flow.login.InitialFlowSetupAction] - <Placing service in context scope: [https://example.com:8081/app?client_name=CasClient]>
tomcat_sandbox1 | 2019-12-12 19:57:46,813 DEBUG [org.apereo.cas.web.flow.login.InitialFlowSetupAction] - <Placing registered service [https://example.com:8081/app\?client_name=CasClient] with id [8081] in context scope>
tomcat_sandbox1 | 2019-12-12 19:57:46,824 DEBUG [org.apereo.cas.web.flow.DefaultSingleSignOnParticipationStrategy] - <Service [https://example.com:8081/app\?client_name=CasClient] is not authorized to participate in SSO>
tomcat_sandbox1 | 2019-12-12 19:57:46,880 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: audit:unknown
tomcat_sandbox1 | WHAT: [result=Client Access Granted,client=Microsoft Account,registeredService=MyApp:https://example.com:8081/app\?client_name=CasClient]
tomcat_sandbox1 | ACTION: DELEGATED_CLIENT_SUCCESS
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:57:46 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:57:46,880 DEBUG [org.apereo.cas.validation.DelegatedAuthenticationAccessStrategyHelper] - <Delegated authentication policy for [AbstractRegisteredService(serviceId=https://example.com:8081/app\?client_name=CasClient, name=MyApp, theme=null, informationUrl=null, privacyUrl=null, responseType=null, id=8081, description=null, expirationPolicy=DefaultRegisteredServiceExpirationPolicy(deleteWhenExpired=false, notifyWhenDeleted=false, notifyWhenExpired=false, expirationDate=null), proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1, proxyTicketExpirationPolicy=null, serviceTicketExpirationPolicy=null, singleSignOnParticipationPolicy=null, evaluationOrder=0, usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@87297e2, logoutType=BACK_CHANNEL, requiredHandlers=[], environments=[], attributeReleasePolicy=ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0)), multifactorPolicy=DefaultRegisteredServiceMultifactorPolicy(multifactorAuthenticationProviders=[], failureMode=UNDEFINED, principalAttributeNameTrigger=null, principalAttributeValueToMatch=null, bypassEnabled=false, forceExecution=false, bypassTrustedDeviceEnabled=false), logo=null, logoutUrl=null, accessStrategy=DefaultRegisteredServiceAccessStrategy(order=0, enabled=true, ssoEnabled=false, unauthorizedRedirectUrl=null, delegatedAuthenticationPolicy=DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false), requireAllAttributes=false, requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}, rejectedAttributes={}, caseInsensitive=false), publicKey=null, properties={}, contacts=[])] allows for using client [Microsoft Account]>
tomcat_sandbox1 | 2019-12-12 19:57:47,033 INFO [org.pac4j.saml.config.SAML2Configuration] - <Bootstrapped Blacklisted Algorithms>
tomcat_sandbox1 | 2019-12-12 19:57:47,034 INFO [org.pac4j.saml.config.SAML2Configuration] - <Bootstrapped Signature Algorithms>
tomcat_sandbox1 | 2019-12-12 19:57:47,034 INFO [org.pac4j.saml.config.SAML2Configuration] - <Bootstrapped Signature Reference Digest Methods>
tomcat_sandbox1 | 2019-12-12 19:57:47,034 INFO [org.pac4j.saml.config.SAML2Configuration] - <Bootstrapped Canonicalization Algorithm>
tomcat_sandbox1 | 2019-12-12 19:57:47,243 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:57:47,243 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:57:47,252 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Loading default evaluable credential criteria mappings>
tomcat_sandbox1 | 2019-12-12 19:57:47,255 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableUsageCredentialCriterion as evaluator for class org.opensaml.security.criteria.UsageCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,257 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableKeyLengthCredentialCriterion as evaluator for class org.opensaml.security.criteria.KeyLengthCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,259 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableKeyNameCredentialCriterion as evaluator for class org.opensaml.security.criteria.KeyNameCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,261 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableKeyAlgorithmCredentialCriterion as evaluator for class org.opensaml.security.criteria.KeyAlgorithmCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,262 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion as evaluator for class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,264 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableX509SubjectKeyIdentifierCredentialCriterion as evaluator for class org.opensaml.security.x509.X509SubjectKeyIdentifierCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,267 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableX509DigestCredentialCriterion as evaluator for class org.opensaml.security.x509.X509DigestCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,269 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableX509SubjectNameCredentialCriterion as evaluator for class org.opensaml.security.x509.X509SubjectNameCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,271 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluablePublicKeyCredentialCriterion as evaluator for class org.opensaml.security.criteria.PublicKeyCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,273 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registering class org.opensaml.security.credential.criteria.impl.EvaluableX509IssuerSerialCredentialCriterion as evaluator for class org.opensaml.security.x509.X509IssuerSerialCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,273 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,331 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Starting to unmarshall Apache XML-Security-based SignatureImpl element>
tomcat_sandbox1 | 2019-12-12 19:57:47,332 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Constructing Apache XMLSignature object>
tomcat_sandbox1 | 2019-12-12 19:57:47,359 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Adding canonicalization and signing algorithms, and HMAC output length to Signature>
tomcat_sandbox1 | 2019-12-12 19:57:47,359 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Adding KeyInfo to Signature>
tomcat_sandbox1 | 2019-12-12 19:57:47,386 DEBUG [org.opensaml.core.xml.io.AbstractXMLObjectUnmarshaller] - <Ignoring unknown child element {urn:oasis:names:tc:SAML:2.0:metadata}RoleDescriptor>
tomcat_sandbox1 | 2019-12-12 19:57:47,388 DEBUG [org.opensaml.core.xml.io.AbstractXMLObjectUnmarshaller] - <Ignoring unknown child element {urn:oasis:names:tc:SAML:2.0:metadata}RoleDescriptor>
tomcat_sandbox1 | 2019-12-12 19:57:47,400 INFO [org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver] - <Using SP entity ID https://example.com:8081/cas>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2000/09/xmldsig#rsa-sha1': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2000/09/xmldsig#dsa-sha1': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#hmac-sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#hmac-sha384': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#hmac-sha512': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2000/09/xmldsig#hmac-sha1': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmlenc#sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#sha384': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,456 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2000/09/xmldsig#sha1': supported>
tomcat_sandbox1 | 2019-12-12 19:57:47,522 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:57:47,522 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:57:47,522 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,579 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:57:47,579 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:57:47,579 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,645 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:57:47,645 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:57:47,646 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,693 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:57:47,693 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:57:47,693 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:47,698 DEBUG [org.opensaml.saml.saml2.metadata.impl.EntityDescriptorMarshaller] - <Writting validUntil attribute to EntityDescriptor DOM element>
tomcat_sandbox1 | 2019-12-12 19:57:47,714 INFO [org.pac4j.saml.metadata.SAML2ServiceProviderMetadataResolver] - <Metadata file already exists at /etc/cas/saml/sp-metadata.xml.>
tomcat_sandbox1 | 2019-12-12 19:57:47,722 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Beginning refresh of metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,722 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Processing new metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,722 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Unmarshalling metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,766 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Preprocessing metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,766 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Releasing cached DOM for metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,766 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Post-processing metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,767 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Computing expiration time for metadata from '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,767 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Expiration of metadata from '/etc/cas/saml/sp-metadata.xml' will occur at 2019-12-12T23:57:47.721Z>
tomcat_sandbox1 | 2019-12-12 19:57:47,767 INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: New metadata successfully loaded for '/etc/cas/saml/sp-metadata.xml'>
tomcat_sandbox1 | 2019-12-12 19:57:47,767 INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Next refresh cycle for metadata provider '/etc/cas/saml/sp-metadata.xml' will occur on '2019-12-12T22:57:47.733Z' ('2019-12-12T22:57:47.733Z' local time)>
tomcat_sandbox1 | 2019-12-12 19:57:47,877 DEBUG [org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver] - <Resolved single event [success] via [org.apereo.cas.web.flow.resolver.impl.RankedMultifactorAuthenticationProviderWebflowEventResolver] for this context>
tomcat_sandbox1 | 2019-12-12 19:57:47,877 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: audit:unknown
tomcat_sandbox1 | WHAT: [event=success,timestamp=Thu Dec 12 19:57:47 UTC 2019,source=RankedMultifactorAuthenticationProviderWebflowEventResolver]
tomcat_sandbox1 | ACTION: AUTHENTICATION_EVENT_TRIGGERED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:57:47 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:57:49,316 DEBUG [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file found for [classpath:custom_messages_en] - neither plain properties nor XML>
tomcat_sandbox1 | 2019-12-12 19:57:49,318 DEBUG [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file found for [classpath:custom_messages] - neither plain properties nor XML>
tomcat_sandbox1 | 2019-12-12 19:57:49,319 DEBUG [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file found for [classpath:messages_en] - neither plain properties nor XML>
tomcat_sandbox1 | 2019-12-12 19:57:49,321 DEBUG [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Loading properties [messages.properties] with encoding 'UTF-8'>
tomcat_sandbox1 | 2019-12-12 19:57:55,317 DEBUG [org.apereo.cas.services.AbstractServicesManager] - <Adding registered service [https://example.com:8081/app\?client_name=CasClient] with name [MyApp] and internal identifier [8081]>
tomcat_sandbox1 | 2019-12-12 19:57:55,317 INFO [org.apereo.cas.services.AbstractServicesManager] - <Loaded [1] service(s) from [JsonServiceRegistry].>
tomcat_sandbox1 | 2019-12-12 19:57:56,839 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Storing delegated authentication request ticket [TST-1-J71wkfmYTgr1eK2ApVQ2BYmEvMYNmdJH] for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] with properties [{theme=, targetService=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={}), method=, locale=, service=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})}]>
tomcat_sandbox1 | 2019-12-12 19:57:56,863 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TST-1-J71wkfmYTgr1eK2ApVQ2BYmEvMYNmdJH] to registry.>
tomcat_sandbox1 | 2019-12-12 19:57:56,872 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Ticket [TST-EE2D8B6ECCEB98BB40C89C7BC667B917] could not be found>
tomcat_sandbox1 | 2019-12-12 19:57:56,873 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TST-03F52DEB3DCF5AB20E737F678B62BD12] to registry.>
tomcat_sandbox1 | 2019-12-12 19:57:56,883 DEBUG [org.pac4j.saml.context.SAML2ContextProvider] - <Creating message store by org.pac4j.saml.store.EmptyStoreFactory>
tomcat_sandbox1 | 2019-12-12 19:57:56,883 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Metadata backing store does not contain any EntityDescriptors with the ID: https://example.com:8081/cas>
tomcat_sandbox1 | 2019-12-12 19:57:56,883 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 0 candidates via EntityIdCriterion: EntityIdCriterion [id=https://example.com:8081/cas]>
tomcat_sandbox1 | 2019-12-12 19:57:56,883 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Candidates iteration was empty, nothing to filter via predicates>
tomcat_sandbox1 | 2019-12-12 19:57:56,883 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://example.com:8081/cas]>
tomcat_sandbox1 | 2019-12-12 19:57:56,883 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:57:56,886 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:57:56,890 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:57:56,891 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Ticket [TST-EE2D8B6ECCEB98BB40C89C7BC667B917] could not be found>
tomcat_sandbox1 | 2019-12-12 19:57:56,894 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:57:56,894 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:57:56,894 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:57:56,894 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:57:56,899 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:57:56,899 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:57:56,899 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:57:56,899 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:57:56,975 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:57:56,975 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:57:56,975 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:57:56,987 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:57:56,989 DEBUG [org.opensaml.saml.security.impl.SAMLMetadataSignatureSigningParametersResolver] - <Resolved signature algorithm URI from SAML metadata SigningMethod: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256>
tomcat_sandbox1 | 2019-12-12 19:57:56,989 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmlenc#sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:57:56,989 DEBUG [org.opensaml.saml.security.impl.SAMLMetadataSignatureSigningParametersResolver] - <Resolved reference digest method algorithm URI from SAML metadata DigestMethod: http://www.w3.org/2001/04/xmlenc#sha256>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <Resolved SignatureSigningParameters:>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Signing credential with key algorithm: RSA>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Signature algorithm URI: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Signature KeyInfoGenerator: present>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Reference digest method algorithm URI: http://www.w3.org/2001/04/xmlenc#sha256>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Reference canonicalization algorithm URI: null>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Canonicalization algorithm URI: http://www.w3.org/2001/10/xml-exc-c14n#>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	HMAC output length: null>
tomcat_sandbox1 | 2019-12-12 19:57:56,992 INFO [org.pac4j.saml.crypto.DefaultSignatureSigningParametersProvider] - <Created signature signing parameters.
tomcat_sandbox1 | Signature algorithm: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
tomcat_sandbox1 | Signature canonicalization algorithm: http://www.w3.org/2001/10/xml-exc-c14n#
tomcat_sandbox1 | Signature reference digest methods: http://www.w3.org/2001/04/xmlenc#sha256>
tomcat_sandbox1 | 2019-12-12 19:57:56,999 DEBUG [org.opensaml.messaging.handler.AbstractMessageHandler] - <Message Handler:  Activation condition for handler returned true>
tomcat_sandbox1 | 2019-12-12 19:57:57,003 DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler] - <Message Handler:  Checking outbound endpoint for allowed URL scheme: https://login.microsoftonline.com/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/saml2>
tomcat_sandbox1 | 2019-12-12 19:57:57,006 DEBUG [org.opensaml.messaging.handler.AbstractMessageHandler] - <Message Handler:  Activation condition for handler returned true>
tomcat_sandbox1 | 2019-12-12 19:57:57,007 DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler] - <Adding destination to outbound SAML 2 protocol message: https://login.microsoftonline.com/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/saml2>
tomcat_sandbox1 | 2019-12-12 19:57:57,007 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Initialized Pac4jHTTPRedirectDeflateEncoder>
tomcat_sandbox1 | 2019-12-12 19:57:57,007 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Deflating and Base64 encoding SAML message>
tomcat_sandbox1 | 2019-12-12 19:57:57,007 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Marshalling message>
tomcat_sandbox1 | 2019-12-12 19:57:57,008 DEBUG [org.opensaml.core.xml.util.XMLObjectSupport] - <Marshalling XMLObject>
tomcat_sandbox1 | 2019-12-12 19:57:57,011 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Building URL to redirect client to>
tomcat_sandbox1 | 2019-12-12 19:57:57,019 DEBUG [org.apereo.cas.web.DelegatedClientNavigationController] - <Determined final redirect action for client [#SAML2Client# | name: Microsoft Account | callbackUrl: https://example.com:8081/cas/login | urlResolver: org.pac4j.core.http.url.DefaultUrlResolver@591fb71d | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@39da7e70 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@7db81ed8 | redirectionActionBuilder: org.pac4j.saml.redirect.SAML2RedirectionActionBuilder@5d33ed8b | credentialsExtractor: org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor@79b01e6f | authenticator: org.pac4j.saml.credentials.authenticator.SAML2Authenticator@1373c6d7 | profileCreator: org.pac4j.core.profile.creator.AuthenticatorProfileCreator@2079e8ef | logoutActionBuilder: org.pac4j.saml.logout.SAML2LogoutActionBuilder@2e0044bf | authorizationGenerators: [] |] as [#HttpAction# | code: 302 |]>
tomcat_sandbox1 | 2019-12-12 19:57:57,024 DEBUG [org.apereo.cas.web.DelegatedClientNavigationController] - <Redirecting client [Microsoft Account] to [https://login.microsoftonline.com/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/saml2?SAMLRequest=hVLLbtswELz3KwReCz0tiRJh2VAbBA2QtEas9NBLQFHLhIVEulzKSP%2B%2BkmyjzcUFdKGwszOzM%2Bvt29B7R7CojK5IHETEAy1Mp%2FRLRZ6aW78g282HNfKhTw6sHt2rfoRfI6DzakSwbsJ9NhrHAewe7FEJeHq8r8ircwdkYXgE4WygtAOrec%2BKqIhDwTHszYvSW9Er0O5Z8wGqByWsQSPdx1oIM2pHvNo5q9rRwYlh0nSmuNMdvFVkEnszKVGau0X%2BhXRZHgyXhUb3SkMgzBDKQq4ymXV%2BLGnrp2lC%2FTKS1JdplmciiynlPFzMEu%2FWWAGL44pI3iMQ7%2B6mIs95R7uYgkwEjdJy1ba0K3m0amkLkuYZL1a5kEU3TeOOI6oj%2FMUjjpN4dFy7iiRRXPpxMn1NXLKMsiwPirL8QbydNc4I039S%2BpTEaDUzHBWy%2BVbInGD7%2BuGeJUHE2tMQsi9Ns%2FN33%2FbNsuCoOrBf58uSAxfpT3%2B2Rbzvl6yTOespfY3slO51lsNZEtmcysAWL3a%2B0sDddez8R3W%2BXEbZlLhyv99xX4fzS9HI5j%2B1Wof%2Fatucn%2B97u%2FkD&RelayState=https%3A%2F%2Fexample.com%3A8081%2Fcas%2Flogin%3Fclient_name%3DMicrosoft%2BAccount] based on identifier [TST-1-J71wkfmYTgr1eK2ApVQ2BYmEvMYNmdJH]>
tomcat_sandbox1 | 2019-12-12 19:58:05,361 INFO [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired tickets removed.>
tomcat_sandbox1 | 2019-12-12 19:58:05,362 DEBUG [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished ticket cleanup.>
tomcat_sandbox1 | 2019-12-12 19:58:11,174 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier could not found as part of the request parameters. Looking at relay-state for the SAML2 client>
tomcat_sandbox1 | 2019-12-12 19:58:11,174 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated client identifier for this request as [Optional[https://example.com:8081/cas/login?client_name=Microsoft+Account]]>
tomcat_sandbox1 | 2019-12-12 19:58:11,175 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Ticket [https://example.com:8081/cas/login?client_name=Microsoft+Account] could not be found>
tomcat_sandbox1 | 2019-12-12 19:58:11,175 ERROR [org.apereo.cas.web.DelegatedClientWebflowManager] - <Delegated client identifier cannot be located in the authentication request [https://example.com:8081/cas/login?client_name=Microsoft+Account]>
tomcat_sandbox1 | 2019-12-12 19:58:11,175 ERROR [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <>
tomcat_sandbox1 | org.apereo.cas.services.UnauthorizedServiceException: 
tomcat_sandbox1 | 	at org.apereo.cas.web.DelegatedClientWebflowManager.retrieveSessionTicketViaClientId(DelegatedClientWebflowManager.java:188) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apereo.cas.web.DelegatedClientWebflowManager.retrieve(DelegatedClientWebflowManager.java:143) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apereo.cas.web.DelegatedClientWebflowManager$$FastClassBySpringCGLIB$$ac855624.invoke(<generated>) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218) ~[spring-core-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:769) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:747) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:353) ~[spring-tx-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:99) ~[spring-tx-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:747) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:689) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apereo.cas.web.DelegatedClientWebflowManager$$EnhancerBySpringCGLIB$$b0e4540a.retrieve(<generated>) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
tomcat_sandbox1 | 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:?]
tomcat_sandbox1 | 	at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
tomcat_sandbox1 | 	at java.lang.reflect.Method.invoke(Method.java:566) ~[?:?]
tomcat_sandbox1 | 	at org.springframework.util.ReflectionUtils.invokeMethod(ReflectionUtils.java:279) ~[spring-core-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.cloud.context.scope.GenericScope$LockedScopedProxyFactoryBean.invoke(GenericScope.java:499) ~[spring-cloud-context-2.2.0.RC1.jar:2.2.0.RC1]
tomcat_sandbox1 | 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:747) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:689) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apereo.cas.web.DelegatedClientWebflowManager$$EnhancerBySpringCGLIB$$3106d287.retrieve(<generated>) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apereo.cas.web.flow.DelegatedClientAuthenticationAction.restoreAuthenticationRequestInContext(DelegatedClientAuthenticationAction.java:394) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apereo.cas.web.flow.DelegatedClientAuthenticationAction.populateContextWithService(DelegatedClientAuthenticationAction.java:229) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apereo.cas.web.flow.DelegatedClientAuthenticationAction.doExecute(DelegatedClientAuthenticationAction.java:213) ~[cas-server-support-pac4j-webflow-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
tomcat_sandbox1 | 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:?]
tomcat_sandbox1 | 	at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
tomcat_sandbox1 | 	at java.lang.reflect.Method.invoke(Method.java:566) ~[?:?]
tomcat_sandbox1 | 	at org.springframework.util.ReflectionUtils.invokeMethod(ReflectionUtils.java:279) ~[spring-core-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.cloud.context.scope.GenericScope$LockedScopedProxyFactoryBean.invoke(GenericScope.java:499) ~[spring-cloud-context-2.2.0.RC1.jar:2.2.0.RC1]
tomcat_sandbox1 | 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at com.sun.proxy.$Proxy255.execute(Unknown Source) ~[?:?]
tomcat_sandbox1 | 	at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.action.EvaluateAction.doExecute(EvaluateAction.java:77) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:101) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.engine.State.enter(State.java:194) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.engine.Flow.start(Flow.java:527) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.engine.impl.FlowExecutionImpl.start(FlowExecutionImpl.java:368) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.engine.impl.FlowExecutionImpl.start(FlowExecutionImpl.java:223) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.webflow.executor.FlowExecutorImpl.launchExecution(FlowExecutorImpl.java:139) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
tomcat_sandbox1 | 	at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:?]
tomcat_sandbox1 | 	at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
tomcat_sandbox1 | 	at java.lang.reflect.Method.invoke(Method.java:566) ~[?:?]
tomcat_sandbox1 | 	at org.springframework.util.ReflectionUtils.invokeMethod(ReflectionUtils.java:279) ~[spring-core-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.cloud.context.scope.GenericScope$LockedScopedProxyFactoryBean.invoke(GenericScope.java:499) ~[spring-cloud-context-2.2.0.RC1.jar:2.2.0.RC1]
tomcat_sandbox1 | 	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212) ~[spring-aop-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at com.sun.proxy.$Proxy266.launchExecution(Unknown Source) ~[?:?]
tomcat_sandbox1 | 	at org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:264) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1040) ~[spring-webmvc-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:943) ~[spring-webmvc-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006) ~[spring-webmvc-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:909) ~[spring-webmvc-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:660) ~[servlet-api.jar:?]
tomcat_sandbox1 | 	at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883) ~[spring-webmvc-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:741) ~[servlet-api.jar:?]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) ~[tomcat-websocket.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apereo.cas.web.support.AuthenticationCredentialsThreadLocalBinderClearingFilter.doFilter(AuthenticationCredentialsThreadLocalBinderClearingFilter.java:28) ~[cas-server-core-web-api-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apereo.cas.web.support.filters.RequestParameterPolicyEnforcementFilter.doFilter(RequestParameterPolicyEnforcementFilter.java:411) ~[cas-server-core-web-api-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apereo.cas.web.support.filters.ResponseHeadersEnforcementFilter.doFilter(ResponseHeadersEnforcementFilter.java:215) ~[cas-server-core-web-api-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apereo.cas.web.support.filters.AddResponseHeadersFilter.doFilter(AddResponseHeadersFilter.java:67) ~[cas-server-core-web-api-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:126) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:90) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:118) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:158) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.access.channel.ChannelProcessingFilter.doFilter(ChannelProcessingFilter.java:157) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178) ~[spring-security-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:128) ~[spring-boot-2.2.0.RELEASE.jar:2.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.boot.web.servlet.support.ErrorPageFilter.access$000(ErrorPageFilter.java:66) ~[spring-boot-2.2.0.RELEASE.jar:2.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.boot.web.servlet.support.ErrorPageFilter$1.doFilterInternal(ErrorPageFilter.java:103) ~[spring-boot-2.2.0.RELEASE.jar:2.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:121) ~[spring-boot-2.2.0.RELEASE.jar:2.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:108) ~[spring-boot-actuator-2.2.0.RELEASE.jar:2.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apereo.cas.logging.web.ThreadContextMDCServletFilter.doFilter(ThreadContextMDCServletFilter.java:99) ~[cas-server-core-logging-6.1.2.jar:6.1.2]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.2.0.RELEASE.jar:5.2.0.RELEASE]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apereo.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:66) ~[inspektr-common-1.8.6.GA.jar:1.8.6.GA]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) ~[log4j-web-2.12.1.jar:2.12.1]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:526) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) ~[catalina.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:367) ~[tomcat-coyote.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) ~[tomcat-coyote.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:860) ~[tomcat-coyote.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.doRun(AprEndpoint.java:2022) ~[tomcat-coyote.jar:9.0.29]
tomcat_sandbox1 | 	at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) ~[tomcat-coyote.jar:9.0.29]
tomcat_sandbox1 | 	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~[?:?]
tomcat_sandbox1 | 	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~[?:?]
tomcat_sandbox1 | 	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) ~[tomcat-util.jar:9.0.29]
tomcat_sandbox1 | 	at java.lang.Thread.run(Thread.java:834) [?:?]
tomcat_sandbox1 | 2019-12-12 19:58:18,196 DEBUG [org.apereo.cas.web.flow.login.InitialFlowSetupAction] - <Placing service in context scope: [https://example.com:8081/app?client_name=CasClient]>
tomcat_sandbox1 | 2019-12-12 19:58:18,196 DEBUG [org.apereo.cas.web.flow.login.InitialFlowSetupAction] - <Placing registered service [https://example.com:8081/app\?client_name=CasClient] with id [8081] in context scope>
tomcat_sandbox1 | 2019-12-12 19:58:18,197 DEBUG [org.apereo.cas.web.flow.DefaultSingleSignOnParticipationStrategy] - <Service [https://example.com:8081/app\?client_name=CasClient] is not authorized to participate in SSO>
tomcat_sandbox1 | 2019-12-12 19:58:18,197 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: audit:unknown
tomcat_sandbox1 | WHAT: [result=Client Access Granted,client=Microsoft Account,registeredService=MyApp:https://example.com:8081/app\?client_name=CasClient]
tomcat_sandbox1 | ACTION: DELEGATED_CLIENT_SUCCESS
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:18 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:18,198 DEBUG [org.apereo.cas.validation.DelegatedAuthenticationAccessStrategyHelper] - <Delegated authentication policy for [AbstractRegisteredService(serviceId=https://example.com:8081/app\?client_name=CasClient, name=MyApp, theme=null, informationUrl=null, privacyUrl=null, responseType=null, id=8081, description=null, expirationPolicy=DefaultRegisteredServiceExpirationPolicy(deleteWhenExpired=false, notifyWhenDeleted=false, notifyWhenExpired=false, expirationDate=null), proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1, proxyTicketExpirationPolicy=null, serviceTicketExpirationPolicy=null, singleSignOnParticipationPolicy=null, evaluationOrder=0, usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@87297e2, logoutType=BACK_CHANNEL, requiredHandlers=[], environments=[], attributeReleasePolicy=ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0)), multifactorPolicy=DefaultRegisteredServiceMultifactorPolicy(multifactorAuthenticationProviders=[], failureMode=UNDEFINED, principalAttributeNameTrigger=null, principalAttributeValueToMatch=null, bypassEnabled=false, forceExecution=false, bypassTrustedDeviceEnabled=false), logo=null, logoutUrl=null, accessStrategy=DefaultRegisteredServiceAccessStrategy(order=0, enabled=true, ssoEnabled=false, unauthorizedRedirectUrl=null, delegatedAuthenticationPolicy=DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false), requireAllAttributes=false, requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}, rejectedAttributes={}, caseInsensitive=false), publicKey=null, properties={}, contacts=[])] allows for using client [Microsoft Account]>
tomcat_sandbox1 | 2019-12-12 19:58:18,199 DEBUG [org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver] - <Resolved single event [success] via [org.apereo.cas.web.flow.resolver.impl.RankedMultifactorAuthenticationProviderWebflowEventResolver] for this context>
tomcat_sandbox1 | 2019-12-12 19:58:18,200 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: audit:unknown
tomcat_sandbox1 | WHAT: [event=success,timestamp=Thu Dec 12 19:58:18 UTC 2019,source=RankedMultifactorAuthenticationProviderWebflowEventResolver]
tomcat_sandbox1 | ACTION: AUTHENTICATION_EVENT_TRIGGERED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:18 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:19,551 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Storing delegated authentication request ticket [TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp] for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] with properties [{theme=, targetService=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={}), method=, locale=, service=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})}]>
tomcat_sandbox1 | 2019-12-12 19:58:19,552 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:19,552 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TST-03F52DEB3DCF5AB20E737F678B62BD12] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:19,552 DEBUG [org.pac4j.saml.context.SAML2ContextProvider] - <Creating message store by org.pac4j.saml.store.EmptyStoreFactory>
tomcat_sandbox1 | 2019-12-12 19:58:19,552 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Metadata backing store does not contain any EntityDescriptors with the ID: https://example.com:8081/cas>
tomcat_sandbox1 | 2019-12-12 19:58:19,552 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 0 candidates via EntityIdCriterion: EntityIdCriterion [id=https://example.com:8081/cas]>
tomcat_sandbox1 | 2019-12-12 19:58:19,552 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Candidates iteration was empty, nothing to filter via predicates>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://example.com:8081/cas]>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:19,553 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TST-03F52DEB3DCF5AB20E737F678B62BD12] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:58:19,554 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:58:19,611 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Building credential from keystore entry for entityID azuread, usage type UNSPECIFIED>
tomcat_sandbox1 | 2019-12-12 19:58:19,611 DEBUG [org.opensaml.security.credential.impl.KeyStoreCredentialResolver] - <Processing PrivateKeyEntry from keystore>
tomcat_sandbox1 | 2019-12-12 19:58:19,612 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:19,612 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:58:19,612 DEBUG [org.opensaml.saml.security.impl.SAMLMetadataSignatureSigningParametersResolver] - <Resolved signature algorithm URI from SAML metadata SigningMethod: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256>
tomcat_sandbox1 | 2019-12-12 19:58:19,612 DEBUG [org.opensaml.xmlsec.algorithm.AlgorithmRegistry] - <Runtime support eval for algorithm URI 'http://www.w3.org/2001/04/xmlenc#sha256': supported>
tomcat_sandbox1 | 2019-12-12 19:58:19,612 DEBUG [org.opensaml.saml.security.impl.SAMLMetadataSignatureSigningParametersResolver] - <Resolved reference digest method algorithm URI from SAML metadata DigestMethod: http://www.w3.org/2001/04/xmlenc#sha256>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <Resolved SignatureSigningParameters:>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Signing credential with key algorithm: RSA>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Signature algorithm URI: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Signature KeyInfoGenerator: present>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Reference digest method algorithm URI: http://www.w3.org/2001/04/xmlenc#sha256>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Reference canonicalization algorithm URI: null>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	Canonicalization algorithm URI: http://www.w3.org/2001/10/xml-exc-c14n#>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.xmlsec.impl.BasicSignatureSigningParametersResolver] - <	HMAC output length: null>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 INFO [org.pac4j.saml.crypto.DefaultSignatureSigningParametersProvider] - <Created signature signing parameters.
tomcat_sandbox1 | Signature algorithm: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
tomcat_sandbox1 | Signature canonicalization algorithm: http://www.w3.org/2001/10/xml-exc-c14n#
tomcat_sandbox1 | Signature reference digest methods: http://www.w3.org/2001/04/xmlenc#sha256>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.messaging.handler.AbstractMessageHandler] - <Message Handler:  Activation condition for handler returned true>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler] - <Message Handler:  Checking outbound endpoint for allowed URL scheme: https://login.microsoftonline.com/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/saml2>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.messaging.handler.AbstractMessageHandler] - <Message Handler:  Activation condition for handler returned true>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler] - <Adding destination to outbound SAML 2 protocol message: https://login.microsoftonline.com/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/saml2>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Initialized Pac4jHTTPRedirectDeflateEncoder>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Deflating and Base64 encoding SAML message>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Marshalling message>
tomcat_sandbox1 | 2019-12-12 19:58:19,613 DEBUG [org.opensaml.core.xml.util.XMLObjectSupport] - <Marshalling XMLObject>
tomcat_sandbox1 | 2019-12-12 19:58:19,648 DEBUG [org.pac4j.saml.transport.Pac4jHTTPRedirectDeflateEncoder] - <Building URL to redirect client to>
tomcat_sandbox1 | 2019-12-12 19:58:19,649 DEBUG [org.apereo.cas.web.DelegatedClientNavigationController] - <Determined final redirect action for client [#SAML2Client# | name: Microsoft Account | callbackUrl: https://example.com:8081/cas/login | urlResolver: org.pac4j.core.http.url.DefaultUrlResolver@591fb71d | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@39da7e70 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@7db81ed8 | redirectionActionBuilder: org.pac4j.saml.redirect.SAML2RedirectionActionBuilder@5d33ed8b | credentialsExtractor: org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor@79b01e6f | authenticator: org.pac4j.saml.credentials.authenticator.SAML2Authenticator@1373c6d7 | profileCreator: org.pac4j.core.profile.creator.AuthenticatorProfileCreator@2079e8ef | logoutActionBuilder: org.pac4j.saml.logout.SAML2LogoutActionBuilder@2e0044bf | authorizationGenerators: [] |] as [#HttpAction# | code: 302 |]>
tomcat_sandbox1 | 2019-12-12 19:58:19,649 DEBUG [org.apereo.cas.web.DelegatedClientNavigationController] - <Redirecting client [Microsoft Account] to [https://login.microsoftonline.com/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/saml2?SAMLRequest=hVJNb5wwFLz3VyBfK8CwOIC1sKKNokZK2lWW5NBLZIyduAJ762dQ%2Bu%2FLx67aXDYSF6M3b2bezHb31nfeKCwoowsUBRh5QnPTKv1SoMf6xs%2FQrvy0BdZ38ZFWg3vVD%2BL3IMB5FYCwbsJ9NRqGXtiDsKPi4vHhrkCvzh2BhuEouLOB0k5YzTqa4SwKOYOwMy9K73inhHbPmvWiuFfcGjDSfa44N4N2yKucs6oZnFgZJk0nilvdircCTWKvJyVKM7fIP5Muy4P%2BvNDoTmkRcNOHMpMbIknrRzJt%2FCSJUz%2FHMvVlQq4IJ1GaMhYuZpF3YywXi%2BMCSdaBQN7tdYGembza4BhnKd7ECYkxy5IM5zjlWUNSTDgTuGEpn6ZhzwDUKP7hAYZJPDimXYFiHOV%2BFE9fHeWUZDTKA0KSn8jbW%2BMMN90XpdckBqupYaCAzrcC6jg9VPd3NA4wbdYhoN%2Fqeu%2FvfxzqZcGoWmG%2Fz5dFR8aTX%2F5sC3lP56zjOespfQ10Tfcyy%2FEkCZVrGejixc5X6pm7jJ3%2FqNaXyyidElfuzzvuy3B2LhoqP6jVNvxfW3l6vu9t%2BRc%3D&RelayState=TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp] based on identifier [TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp]>
tomcat_sandbox1 | 2019-12-12 19:58:20,098 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Client identifier could not found as part of the request parameters. Looking at relay-state for the SAML2 client>
tomcat_sandbox1 | 2019-12-12 19:58:20,099 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated client identifier for this request as [Optional[TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,099 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Located delegated client identifier as [TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp]>
tomcat_sandbox1 | 2019-12-12 19:58:20,099 DEBUG [org.apereo.cas.web.DelegatedClientWebflowManager] - <Removing delegated client identifier [TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp] from registry>
tomcat_sandbox1 | 2019-12-12 19:58:20,099 DEBUG [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Removing ticket [TransientSessionTicketImpl(super=TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp, service=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={}), properties={theme=, targetService=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={}), method=, locale=, service=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})})] from the registry.>
tomcat_sandbox1 | 2019-12-12 19:58:20,106 DEBUG [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Delegated authentication client is [#SAML2Client# | name: Microsoft Account | callbackUrl: https://example.com:8081/cas/login | urlResolver: org.pac4j.core.http.url.DefaultUrlResolver@591fb71d | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@39da7e70 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@7db81ed8 | redirectionActionBuilder: org.pac4j.saml.redirect.SAML2RedirectionActionBuilder@5d33ed8b | credentialsExtractor: org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor@79b01e6f | authenticator: org.pac4j.saml.credentials.authenticator.SAML2Authenticator@1373c6d7 | profileCreator: org.pac4j.core.profile.creator.AuthenticatorProfileCreator@2079e8ef | logoutActionBuilder: org.pac4j.saml.logout.SAML2LogoutActionBuilder@2e0044bf | authorizationGenerators: [] |] with service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,107 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: audit:unknown
tomcat_sandbox1 | WHAT: [result=Client Access Granted,client=Microsoft Account,registeredService=MyApp:https://example.com:8081/app\?client_name=CasClient]
tomcat_sandbox1 | ACTION: DELEGATED_CLIENT_SUCCESS
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,107 DEBUG [org.apereo.cas.validation.DelegatedAuthenticationAccessStrategyHelper] - <Delegated authentication policy for [AbstractRegisteredService(serviceId=https://example.com:8081/app\?client_name=CasClient, name=MyApp, theme=null, informationUrl=null, privacyUrl=null, responseType=null, id=8081, description=null, expirationPolicy=DefaultRegisteredServiceExpirationPolicy(deleteWhenExpired=false, notifyWhenDeleted=false, notifyWhenExpired=false, expirationDate=null), proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1, proxyTicketExpirationPolicy=null, serviceTicketExpirationPolicy=null, singleSignOnParticipationPolicy=null, evaluationOrder=0, usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@87297e2, logoutType=BACK_CHANNEL, requiredHandlers=[], environments=[], attributeReleasePolicy=ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0)), multifactorPolicy=DefaultRegisteredServiceMultifactorPolicy(multifactorAuthenticationProviders=[], failureMode=UNDEFINED, principalAttributeNameTrigger=null, principalAttributeValueToMatch=null, bypassEnabled=false, forceExecution=false, bypassTrustedDeviceEnabled=false), logo=null, logoutUrl=null, accessStrategy=DefaultRegisteredServiceAccessStrategy(order=0, enabled=true, ssoEnabled=false, unauthorizedRedirectUrl=null, delegatedAuthenticationPolicy=DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false), requireAllAttributes=false, requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}, rejectedAttributes={}, caseInsensitive=false), publicKey=null, properties={}, contacts=[])] allows for using client [Microsoft Account]>
tomcat_sandbox1 | 2019-12-12 19:58:20,107 DEBUG [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Fetching credentials from delegated client [#SAML2Client# | name: Microsoft Account | callbackUrl: https://example.com:8081/cas/login | urlResolver: org.pac4j.core.http.url.DefaultUrlResolver@591fb71d | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@39da7e70 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@7db81ed8 | redirectionActionBuilder: org.pac4j.saml.redirect.SAML2RedirectionActionBuilder@5d33ed8b | credentialsExtractor: org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor@79b01e6f | authenticator: org.pac4j.saml.credentials.authenticator.SAML2Authenticator@1373c6d7 | profileCreator: org.pac4j.core.profile.creator.AuthenticatorProfileCreator@2079e8ef | logoutActionBuilder: org.pac4j.saml.logout.SAML2LogoutActionBuilder@2e0044bf | authorizationGenerators: [] |]>
tomcat_sandbox1 | 2019-12-12 19:58:20,107 DEBUG [org.pac4j.saml.context.SAML2ContextProvider] - <Creating message store by org.pac4j.saml.store.EmptyStoreFactory>
tomcat_sandbox1 | 2019-12-12 19:58:20,107 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Metadata backing store does not contain any EntityDescriptors with the ID: https://example.com:8081/cas>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 0 candidates via EntityIdCriterion: EntityIdCriterion [id=https://example.com:8081/cas]>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Candidates iteration was empty, nothing to filter via predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://example.com:8081/cas]>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver FilesystemMetadataResolver org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,108 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:20,111 DEBUG [org.pac4j.saml.transport.Pac4jHTTPPostDecoder] - <Initialized Pac4jHTTPPostDecoder>
tomcat_sandbox1 | 2019-12-12 19:58:20,112 DEBUG [org.pac4j.saml.transport.Pac4jHTTPPostDecoder] - <Decoded SAML relay state of: TST-2-9cjBUW--ZuoDYAXeL8PgIjn82zYNuAyp>
tomcat_sandbox1 | 2019-12-12 19:58:20,113 DEBUG [org.opensaml.core.xml.util.XMLObjectSupport] - <Parsing InputStream into DOM document>
tomcat_sandbox1 | 2019-12-12 19:58:20,115 DEBUG [org.opensaml.core.xml.util.XMLObjectSupport] - <Unmarshalling DOM parsed from InputStream>
tomcat_sandbox1 | 2019-12-12 19:58:20,124 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Starting to unmarshall Apache XML-Security-based SignatureImpl element>
tomcat_sandbox1 | 2019-12-12 19:58:20,124 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Constructing Apache XMLSignature object>
tomcat_sandbox1 | 2019-12-12 19:58:20,124 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Adding canonicalization and signing algorithms, and HMAC output length to Signature>
tomcat_sandbox1 | 2019-12-12 19:58:20,124 DEBUG [org.opensaml.xmlsec.signature.impl.SignatureUnmarshaller] - <Adding KeyInfo to Signature>
tomcat_sandbox1 | 2019-12-12 19:58:20,139 DEBUG [org.opensaml.core.xml.util.XMLObjectSupport] - <InputStream succesfully unmarshalled>
tomcat_sandbox1 | 2019-12-12 19:58:20,139 DEBUG [org.pac4j.saml.transport.Pac4jHTTPPostDecoder] - <Decoded SAML message>
tomcat_sandbox1 | 2019-12-12 19:58:20,140 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:58:20,140 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:58:20,140 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selecting default IndexedEndpoint>
tomcat_sandbox1 | 2019-12-12 19:58:20,140 DEBUG [org.opensaml.saml.metadata.support.SAML2MetadataSupport] - <Selected first IndexedEndpoint with no explicit isDefault>
tomcat_sandbox1 | 2019-12-12 19:58:20,175 DEBUG [org.opensaml.messaging.handler.AbstractMessageHandler] - <Message Handler:  Activation condition for handler returned true>
tomcat_sandbox1 | 2019-12-12 19:58:20,176 DEBUG [org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler] - <Message Handler:  Evaluating message replay for message ID '_028845f5-4684-4757-bf96-70e7367a4c39', issue instant '2019-12-12T19:58:19.947Z', entityID 'https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/'>
tomcat_sandbox1 | 2019-12-12 19:58:20,177 DEBUG [org.opensaml.storage.AbstractMapBackedStorageService] - <Read failed, context 'org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler' not found>
tomcat_sandbox1 | 2019-12-12 19:58:20,177 DEBUG [org.opensaml.storage.ReplayCache] - <Value '_028845f5-4684-4757-bf96-70e7367a4c39' was not a replay, adding to cache with expiration time 1576181599947>
tomcat_sandbox1 | 2019-12-12 19:58:20,185 DEBUG [org.opensaml.storage.AbstractMapBackedStorageService] - <Read failed, context 'org.pac4j.saml.sso.impl.SAML2AuthnResponseValidator' not found>
tomcat_sandbox1 | 2019-12-12 19:58:20,185 DEBUG [org.opensaml.storage.ReplayCache] - <Value '_fb35774e-89e3-461a-82de-e95695533100' was not a replay, adding to cache with expiration time 1576185199947>
tomcat_sandbox1 | 2019-12-12 19:58:20,196 DEBUG [org.opensaml.saml.security.impl.SAMLSignatureProfileValidator] - <Saw Enveloped signature transform>
tomcat_sandbox1 | 2019-12-12 19:58:20,196 DEBUG [org.opensaml.saml.security.impl.SAMLSignatureProfileValidator] - <Saw Exclusive C14N signature transform>
tomcat_sandbox1 | 2019-12-12 19:58:20,199 DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver] - <Resolving credentials from metadata using entityID: https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/, role: {urn:oasis:names:tc:SAML:2.0:metadata}IDPSSODescriptor, protocol: urn:oasis:names:tc:SAML:2.0:protocol, usage: SIGNING>
tomcat_sandbox1 | 2019-12-12 19:58:20,199 DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver] - <Retrieving role descriptor metadata for entity 'https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/' in role '{urn:oasis:names:tc:SAML:2.0:metadata}IDPSSODescriptor' for protocol 'urn:oasis:names:tc:SAML:2.0:protocol'>
tomcat_sandbox1 | 2019-12-12 19:58:20,200 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Resolved 1 candidates via EntityIdCriterion: EntityIdCriterion [id=https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:20,200 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: Attempting to filter candidate EntityDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,200 DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver] - <Metadata Resolver DOMMetadataResolver org.opensaml.saml.metadata.resolver.impl.DOMMetadataResolver: After predicate filtering 1 EntityDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:20,200 DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver] - <Resolved 1 source EntityDescriptors>
tomcat_sandbox1 | 2019-12-12 19:58:20,200 DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver] - <Resolved 1 RoleDescriptor candidates via role criteria, performing predicate filtering>
tomcat_sandbox1 | 2019-12-12 19:58:20,200 DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver] - <Attempting to filter candidate RoleDescriptors via resolved Predicates>
tomcat_sandbox1 | 2019-12-12 19:58:20,201 DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver] - <After predicate filtering 1 RoleDescriptors remain>
tomcat_sandbox1 | 2019-12-12 19:58:20,201 DEBUG [org.opensaml.saml.security.impl.MetadataCredentialResolver] - <Found no cached credentials in KeyDescriptor object metadata, resolving from KeyInfo>
tomcat_sandbox1 | 2019-12-12 19:58:20,203 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Found 0 key names: []>
tomcat_sandbox1 | 2019-12-12 19:58:20,203 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Processing KeyInfo child with QName: {http://www.w3.org/2000/09/xmldsig#}X509Data>
tomcat_sandbox1 | 2019-12-12 19:58:20,203 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Provider org.opensaml.xmlsec.keyinfo.impl.provider.RSAKeyValueProvider doesn't handle objects of type {http://www.w3.org/2000/09/xmldsig#}X509Data, skipping>
tomcat_sandbox1 | 2019-12-12 19:58:20,203 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Provider org.opensaml.xmlsec.keyinfo.impl.provider.DSAKeyValueProvider doesn't handle objects of type {http://www.w3.org/2000/09/xmldsig#}X509Data, skipping>
tomcat_sandbox1 | 2019-12-12 19:58:20,203 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Provider org.opensaml.xmlsec.keyinfo.impl.provider.DEREncodedKeyValueProvider doesn't handle objects of type {http://www.w3.org/2000/09/xmldsig#}X509Data, skipping>
tomcat_sandbox1 | 2019-12-12 19:58:20,204 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Processing KeyInfo child {http://www.w3.org/2000/09/xmldsig#}X509Data with provider org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider>
tomcat_sandbox1 | 2019-12-12 19:58:20,204 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Attempting to extract credential from an X509Data>
tomcat_sandbox1 | 2019-12-12 19:58:20,207 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Found 1 X509Certificates>
tomcat_sandbox1 | 2019-12-12 19:58:20,207 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Found 0 X509CRLs>
tomcat_sandbox1 | 2019-12-12 19:58:20,207 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Single certificate was present, treating as end-entity certificate>
tomcat_sandbox1 | 2019-12-12 19:58:20,208 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Credentials successfully extracted from child {http://www.w3.org/2000/09/xmldsig#}X509Data by provider org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider>
tomcat_sandbox1 | 2019-12-12 19:58:20,208 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <A total of 1 credentials were resolved>
tomcat_sandbox1 | 2019-12-12 19:58:20,208 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry could not locate evaluable criteria for criteria class org.opensaml.xmlsec.keyinfo.KeyInfoCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,209 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableKeyAlgorithmCredentialCriterion for criteria class org.opensaml.security.criteria.KeyAlgorithmCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,211 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry could not locate evaluable criteria for criteria class org.opensaml.saml.criterion.EntityRoleCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,211 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableEntityIDCredentialCriterion for criteria class org.opensaml.core.criterion.EntityIdCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,211 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry located evaluable criteria class org.opensaml.security.credential.criteria.impl.EvaluableUsageCredentialCriterion for criteria class org.opensaml.security.criteria.UsageCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,212 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry could not locate evaluable criteria for criteria class org.opensaml.saml.criterion.ProtocolCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,212 DEBUG [org.opensaml.xmlsec.signature.support.impl.BaseSignatureTrustEngine] - <Attempting to verify signature and establish trust using KeyInfo-derived credentials>
tomcat_sandbox1 | 2019-12-12 19:58:20,212 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Found 0 key names: []>
tomcat_sandbox1 | 2019-12-12 19:58:20,212 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Processing KeyInfo child with QName: {http://www.w3.org/2000/09/xmldsig#}X509Data>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Provider org.opensaml.xmlsec.keyinfo.impl.provider.RSAKeyValueProvider doesn't handle objects of type {http://www.w3.org/2000/09/xmldsig#}X509Data, skipping>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Provider org.opensaml.xmlsec.keyinfo.impl.provider.DSAKeyValueProvider doesn't handle objects of type {http://www.w3.org/2000/09/xmldsig#}X509Data, skipping>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Provider org.opensaml.xmlsec.keyinfo.impl.provider.DEREncodedKeyValueProvider doesn't handle objects of type {http://www.w3.org/2000/09/xmldsig#}X509Data, skipping>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Processing KeyInfo child {http://www.w3.org/2000/09/xmldsig#}X509Data with provider org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Attempting to extract credential from an X509Data>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Found 1 X509Certificates>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Found 0 X509CRLs>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider] - <Single certificate was present, treating as end-entity certificate>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <Credentials successfully extracted from child {http://www.w3.org/2000/09/xmldsig#}X509Data by provider org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.xmlsec.keyinfo.impl.BasicProviderKeyInfoCredentialResolver] - <A total of 1 credentials were resolved>
tomcat_sandbox1 | 2019-12-12 19:58:20,213 DEBUG [org.opensaml.security.credential.criteria.impl.EvaluableCredentialCriteriaRegistry] - <Registry could not locate evaluable criteria for criteria class org.opensaml.xmlsec.keyinfo.KeyInfoCriterion>
tomcat_sandbox1 | 2019-12-12 19:58:20,220 DEBUG [org.opensaml.xmlsec.signature.support.SignatureValidationProvider] - <Using a validation provider of implementation: org.opensaml.xmlsec.signature.support.impl.provider.ApacheSantuarioSignatureValidationProviderImpl>
tomcat_sandbox1 | 2019-12-12 19:58:20,220 DEBUG [org.opensaml.xmlsec.signature.support.impl.provider.ApacheSantuarioSignatureValidationProviderImpl] - <Attempting to validate signature using key from supplied credential>
tomcat_sandbox1 | 2019-12-12 19:58:20,220 DEBUG [org.opensaml.xmlsec.signature.support.impl.provider.ApacheSantuarioSignatureValidationProviderImpl] - <Accessing XMLSignature object>
tomcat_sandbox1 | 2019-12-12 19:58:20,220 DEBUG [org.opensaml.xmlsec.signature.support.impl.provider.ApacheSantuarioSignatureValidationProviderImpl] - <Validating signature with signature algorithm URI: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256>
tomcat_sandbox1 | 2019-12-12 19:58:20,220 DEBUG [org.opensaml.xmlsec.signature.support.impl.provider.ApacheSantuarioSignatureValidationProviderImpl] - <Validation credential key algorithm 'RSA', key instance class 'sun.security.rsa.RSAPublicKeyImpl'>
tomcat_sandbox1 | 2019-12-12 19:58:20,242 DEBUG [org.opensaml.xmlsec.signature.support.impl.provider.ApacheSantuarioSignatureValidationProviderImpl] - <Signature validated with key from supplied credential>
tomcat_sandbox1 | 2019-12-12 19:58:20,242 DEBUG [org.opensaml.xmlsec.signature.support.impl.BaseSignatureTrustEngine] - <Signature validation using candidate credential was successful>
tomcat_sandbox1 | 2019-12-12 19:58:20,242 DEBUG [org.opensaml.xmlsec.signature.support.impl.BaseSignatureTrustEngine] - <Successfully verified signature using KeyInfo-derived credential>
tomcat_sandbox1 | 2019-12-12 19:58:20,242 DEBUG [org.opensaml.xmlsec.signature.support.impl.BaseSignatureTrustEngine] - <Attempting to establish trust of KeyInfo-derived credential>
tomcat_sandbox1 | 2019-12-12 19:58:20,242 DEBUG [org.opensaml.security.trust.impl.ExplicitKeyTrustEvaluator] - <Successfully validated untrusted credential against trusted key>
tomcat_sandbox1 | 2019-12-12 19:58:20,242 DEBUG [org.opensaml.xmlsec.signature.support.impl.BaseSignatureTrustEngine] - <Successfully established trust of KeyInfo-derived credential>
tomcat_sandbox1 | 2019-12-12 19:58:20,243 DEBUG [org.pac4j.core.logout.handler.DefaultLogoutHandler] - <key: _fb35774e-89e3-461a-82de-e95695533100 -> trackableSession: Optional[org.apache.catalina.session.StandardSessionFacade@64fd41eb]>
tomcat_sandbox1 | 2019-12-12 19:58:20,243 DEBUG [org.pac4j.core.logout.handler.DefaultLogoutHandler] - <sessionId: 03F52DEB3DCF5AB20E737F678B62BD12>
tomcat_sandbox1 | 2019-12-12 19:58:20,277 INFO [org.pac4j.saml.credentials.SAML2Credentials] - <Constructed SAML2 credentials: SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,292 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: sessionindex / value: _fb35774e-89e3-461a-82de-e95695533100 / class java.lang.String>
tomcat_sandbox1 | 2019-12-12 19:58:20,296 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: samlNameIdFormat / value: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress / class java.lang.String>
tomcat_sandbox1 | 2019-12-12 19:58:20,296 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,297 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Adding attribute http://schemas.microsoft.com/identity/claims/tenantid to profile with values [f8f35f5d-1f7b-4427-90f7-f4565c5177aa]>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: http://schemas.microsoft.com/identity/claims/tenantid / value: [f8f35f5d-1f7b-4427-90f7-f4565c5177aa] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: http://schemas.microsoft.com/identity/claims/tenantid / value: [f8f35f5d-1f7b-4427-90f7-f4565c5177aa] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Mapping attribute http://schemas.microsoft.com/identity/claims/objectidentifier as uuid with values [263ab39d-f0ef-4477-ac4d-87862971fcbe] to profile>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: uuid / value: [263ab39d-f0ef-4477-ac4d-87862971fcbe] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: uuid / value: [263ab39d-f0ef-4477-ac4d-87862971fcbe] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Mapping attribute http://schemas.microsoft.com/identity/claims/displayname as fullName with values [Test Demo] to profile>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: fullName / value: [Test Demo] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: fullName / value: [Test Demo] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Adding attribute http://schemas.microsoft.com/ws/2008/06/identity/claims/groups to profile with values [a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: http://schemas.microsoft.com/ws/2008/06/identity/claims/groups / value: [a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: http://schemas.microsoft.com/ws/2008/06/identity/claims/groups / value: [a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Adding attribute http://schemas.microsoft.com/identity/claims/identityprovider to profile with values [https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: http://schemas.microsoft.com/identity/claims/identityprovider / value: [https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: http://schemas.microsoft.com/identity/claims/identityprovider / value: [https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Adding attribute http://schemas.microsoft.com/claims/authnmethodsreferences to profile with values [http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: http://schemas.microsoft.com/claims/authnmethodsreferences / value: [http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: http://schemas.microsoft.com/claims/authnmethodsreferences / value: [http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Adding attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname to profile with values [Test]>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname / value: [Test] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname / value: [Test] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Adding attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname to profile with values [Demo]>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname / value: [Demo] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname / value: [Demo] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Mapping attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress as emailAddress with values [tdemo@myappdev.onmicrosoft.com] to profile>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <no conversion => key: emailAddress / value: [tdemo@myappdev.onmicrosoft.com] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: emailAddress / value: [tdemo@myappdev.onmicrosoft.com] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Processing profile attribute SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.credentials.authenticator.SAML2Authenticator] - <Mapping attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name as username with values [tdemo@myappdev.onmicrosoft.com] to profile>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.core.profile.definition.CommonProfileDefinition] - <converted to => key: username / value: tdemo@myappdev.onmicrosoft.com / class java.lang.String>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: username / value: tdemo@myappdev.onmicrosoft.com / class java.lang.String>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: issuerId / value: https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/ / class java.lang.String>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: authnContext / value: [urn:oasis:names:tc:SAML:2.0:ac:classes:Password] / class java.util.ArrayList>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: notBefore / value: 2019-12-12T19:53:19.947Z / class org.joda.time.DateTime>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: notBefore / value: 2019-12-12T19:53:19.947Z / class org.joda.time.DateTime>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: notOnOrAfter / value: 2019-12-12T20:58:19.947Z / class org.joda.time.DateTime>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.profile.SAML2Profile] - <adding => key: notOnOrAfter / value: 2019-12-12T20:58:19.947Z / class org.joda.time.DateTime>
tomcat_sandbox1 | 2019-12-12 19:58:20,298 DEBUG [org.pac4j.saml.client.SAML2Client] - <Credentials validation took: 20 ms>
tomcat_sandbox1 | 2019-12-12 19:58:20,299 DEBUG [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Retrieved credentials from client as [Optional[SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,299 INFO [org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <Credentials are successfully authenticated using the delegated client [Microsoft Account]>
tomcat_sandbox1 | 2019-12-12 19:58:20,301 DEBUG [org.apereo.cas.authentication.adaptive.DefaultAdaptiveAuthenticationPolicy] - <User agent [Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0] is authorized to proceed>
tomcat_sandbox1 | 2019-12-12 19:58:20,301 DEBUG [org.apereo.cas.authentication.adaptive.DefaultAdaptiveAuthenticationPolicy] - <Adaptive authentication policy has authorized client [10.0.27.1] to proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,301 DEBUG [org.apereo.cas.web.flow.resolver.impl.ServiceTicketRequestWebflowEventResolver] - <Located ticket-granting ticket [] from the request context>
tomcat_sandbox1 | 2019-12-12 19:58:20,301 DEBUG [org.apereo.cas.web.flow.resolver.impl.ServiceTicketRequestWebflowEventResolver] - <Located service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] from the request context>
tomcat_sandbox1 | 2019-12-12 19:58:20,301 DEBUG [org.apereo.cas.web.flow.resolver.impl.ServiceTicketRequestWebflowEventResolver] - <Provided value for [renew] request parameter is [null]>
tomcat_sandbox1 | 2019-12-12 19:58:20,301 DEBUG [org.apereo.cas.web.flow.resolver.impl.ServiceTicketRequestWebflowEventResolver] - <Request is not eligible to be issued service tickets just yet>
tomcat_sandbox1 | 2019-12-12 19:58:20,312 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Sorted and registered authentication pre processors for this transaction are [[]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,314 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authentication credentials provided for this transaction are [[ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=true, userProfile=null)]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,328 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Candidate/Registered authentication handlers for this transaction are [[org.apereo.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler@4d8ff47a, org.apereo.cas.support.pac4j.authentication.handler.support.DelegatedClientAuthenticationHandler@69befb08, org.apereo.cas.authentication.MongoDbAuthenticationHandler@43785cb8]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,328 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Sorted and registered authentication handler resolvers for this transaction are [[org.apereo.cas.authentication.handler.RegisteredServiceAuthenticationHandlerResolver@424f1b88]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,328 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Authentication handler resolvers for this transaction are [[org.apereo.cas.authentication.handler.RegisteredServiceAuthenticationHandlerResolver@424f1b88]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,359 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Authentication handler resolvers produced no candidate authentication handler. Using the default handler resolver instead...>
tomcat_sandbox1 | 2019-12-12 19:58:20,360 DEBUG [org.apereo.cas.authentication.AuthenticationHandlerResolver] - <Default authentication handlers used for this transaction are [HttpBasedServiceCredentialsAuthenticationHandler,DelegatedClientAuthenticationHandler,MongoDbAuthenticationHandler]>
tomcat_sandbox1 | 2019-12-12 19:58:20,360 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Resolved and finalized authentication handlers to carry out this authentication transaction are [[org.apereo.cas.authentication.handler.RegisteredServiceAuthenticationHandlerResolver@424f1b88]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,360 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Candidate resolved authentication handlers for this transaction are [[org.apereo.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler@4d8ff47a, org.apereo.cas.support.pac4j.authentication.handler.support.DelegatedClientAuthenticationHandler@69befb08, org.apereo.cas.authentication.MongoDbAuthenticationHandler@43785cb8]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,360 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Attempting to authenticate credential [ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=true, userProfile=null)]>
tomcat_sandbox1 | 2019-12-12 19:58:20,362 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authentication handler [HttpBasedServiceCredentialsAuthenticationHandler] does not support the credential type [ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=true, userProfile=null)]. Trying next...>
tomcat_sandbox1 | 2019-12-12 19:58:20,362 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Attempting authentication of [NotYetAuthenticated-b3a0558a-3e27-4b1e-9153-9bf5e78ec36f] using [DelegatedClientAuthenticationHandler]>
tomcat_sandbox1 | 2019-12-12 19:58:20,363 DEBUG [org.apereo.cas.support.pac4j.authentication.handler.support.DelegatedClientAuthenticationHandler] - <Located client credentials as [ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=true, userProfile=null)]>
tomcat_sandbox1 | 2019-12-12 19:58:20,363 DEBUG [org.pac4j.saml.client.SAML2Client] - <credentials : SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}>
tomcat_sandbox1 | 2019-12-12 19:58:20,363 DEBUG [org.pac4j.saml.client.SAML2Client] - <profile: Optional[#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: null | linkedId: null |]>
tomcat_sandbox1 | 2019-12-12 19:58:20,363 DEBUG [org.apereo.cas.support.pac4j.authentication.handler.support.DelegatedClientAuthenticationHandler] - <Final user profile is: [#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |]>
tomcat_sandbox1 | 2019-12-12 19:58:20,367 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TST-03F52DEB3DCF5AB20E737F678B62BD12] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:20,367 DEBUG [org.apereo.cas.integration.pac4j.authentication.handler.support.AbstractPac4jAuthenticationHandler] - <Final principal id determined based on client [#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |] and user profile [#SAML2Client# | name: Microsoft Account | callbackUrl: https://example.com:8081/cas/login | urlResolver: org.pac4j.core.http.url.DefaultUrlResolver@591fb71d | callbackUrlResolver: org.pac4j.core.http.callback.QueryParameterCallbackUrlResolver@39da7e70 | ajaxRequestResolver: org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@7db81ed8 | redirectionActionBuilder: org.pac4j.saml.redirect.SAML2RedirectionActionBuilder@5d33ed8b | credentialsExtractor: org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor@79b01e6f | authenticator: org.pac4j.saml.credentials.authenticator.SAML2Authenticator@1373c6d7 | profileCreator: org.pac4j.core.profile.creator.AuthenticatorProfileCreator@2079e8ef | logoutActionBuilder: org.pac4j.saml.logout.SAML2LogoutActionBuilder@2e0044bf | authorizationGenerators: [] |] is [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:20,370 DEBUG [org.apereo.cas.integration.pac4j.authentication.handler.support.AbstractPac4jAuthenticationHandler] - <Constructed authenticated principal [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]})] based on user profile [#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |]>
tomcat_sandbox1 | 2019-12-12 19:58:20,387 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authentication handler [DelegatedClientAuthenticationHandler] successfully authenticated [ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=false, userProfile=#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |)]>
tomcat_sandbox1 | 2019-12-12 19:58:20,389 DEBUG [org.apereo.cas.authentication.principal.resolvers.ChainingPrincipalResolver] - <Invoking principal resolver [EchoingPrincipalResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,389 DEBUG [org.apereo.cas.authentication.principal.resolvers.EchoingPrincipalResolver] - <Echoing back the authenticated principal [Optional[SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]})]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,389 DEBUG [org.apereo.cas.authentication.principal.resolvers.ChainingPrincipalResolver] - <Resolved principal [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,390 DEBUG [org.apereo.cas.authentication.principal.resolvers.ChainingPrincipalResolver] - <Resolved principal [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,390 DEBUG [org.apereo.cas.authentication.principal.resolvers.ChainingPrincipalResolver] - <Adding attributes [{emailAddress=[tdemo@myappdev.onmicrosoft.com], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], notBefore=[2019-12-12T19:53:19.947Z], notOnOrAfter=[2019-12-12T20:58:19.947Z], username=[tdemo@myappdev.onmicrosoft.com], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}] for the final principal>
tomcat_sandbox1 | 2019-12-12 19:58:20,392 DEBUG [org.apereo.cas.authentication.CoreAuthenticationUtils] - <Merged attributes with the final result as [{emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]}]>
tomcat_sandbox1 | 2019-12-12 19:58:20,393 DEBUG [org.apereo.cas.authentication.principal.resolvers.ChainingPrincipalResolver] - <Final principal constructed by the chain of resolvers is [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,393 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <[ChainingPrincipalResolver(principalFactory=org.apereo.cas.authentication.principal.DefaultPrincipalFactory@1, chain=[EchoingPrincipalResolver()])] resolved [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})] from [ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=false, userProfile=#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |)]>
tomcat_sandbox1 | 2019-12-12 19:58:20,394 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Final principal resolved for this authentication event is [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,396 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Sorted and registered authentication policies for this transaction are [[org.apereo.cas.authentication.policy.AtLeastOneCredentialValidatedAuthenticationPolicy@527d48f0]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,397 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Executing authentication policy [AtLeastOneCredentialValidatedAuthenticationPolicy]>
tomcat_sandbox1 | 2019-12-12 19:58:20,398 DEBUG [org.apereo.cas.authentication.policy.AtLeastOneCredentialValidatedAuthenticationPolicy] - <Authentication policy is satisfied having found at least one authentication transactions>
tomcat_sandbox1 | 2019-12-12 19:58:20,398 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Sorted and registered authentication policies for this transaction are [[org.apereo.cas.authentication.policy.AtLeastOneCredentialValidatedAuthenticationPolicy@527d48f0]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,398 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Executing authentication policy [AtLeastOneCredentialValidatedAuthenticationPolicy]>
tomcat_sandbox1 | 2019-12-12 19:58:20,398 DEBUG [org.apereo.cas.authentication.policy.AtLeastOneCredentialValidatedAuthenticationPolicy] - <Authentication policy is satisfied having found at least one authentication transactions>
tomcat_sandbox1 | 2019-12-12 19:58:20,399 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Invoking authentication metadata populators for authentication transaction>
tomcat_sandbox1 | 2019-12-12 19:58:20,399 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Sorted and registered metadata populators for this transaction are [[SuccessfulHandlerMetaDataPopulator(super=BaseAuthenticationMetaDataPopulator(order=-2147483648)), RememberMeAuthenticationMetaDataPopulator(super=BaseAuthenticationMetaDataPopulator(order=-2147483648)), BaseAuthenticationMetaDataPopulator(order=-2147483648), ClientAuthenticationMetaDataPopulator(super=BaseAuthenticationMetaDataPopulator(order=-2147483648))]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,403 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Invoking authentication post processors for authentication transaction>
tomcat_sandbox1 | 2019-12-12 19:58:20,403 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Sorted and registered authentication post processors for this transaction are [[]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,403 INFO [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authenticated principal [tdemo@myappdev.onmicrosoft.com] with attributes [{emailAddress=[tdemo@myappdev.onmicrosoft.com], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], notBefore=[2019-12-12T19:53:19.947Z], notOnOrAfter=[2019-12-12T20:58:19.947Z], username=[tdemo@myappdev.onmicrosoft.com], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}] via credentials [[ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=false, userProfile=#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |)]].>
tomcat_sandbox1 | 2019-12-12 19:58:20,406 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: Supplied credentials: [ClientCredential(credentials=SAML2Credentials{nameId=SAMLNameID{format='urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress', nameQualifier='null', spNameQualifier='null', spProviderId='null', value='tdemo@myappdev.onmicrosoft.com'}, sessionIndex='_fb35774e-89e3-461a-82de-e95695533100', attributes=[SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/tenantid', nameFormat='null', attributeValues=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/objectidentifier', nameFormat='null', attributeValues=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/displayname', nameFormat='null', attributeValues=[Test Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/ws/2008/06/identity/claims/groups', nameFormat='null', attributeValues=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/identity/claims/identityprovider', nameFormat='null', attributeValues=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]}, SAMLAttribute{friendlyName='null', name='http://schemas.microsoft.com/claims/authnmethodsreferences', nameFormat='null', attributeValues=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname', nameFormat='null', attributeValues=[Test]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname', nameFormat='null', attributeValues=[Demo]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}, SAMLAttribute{friendlyName='null', name='http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name', nameFormat='null', attributeValues=[tdemo@myappdev.onmicrosoft.com]}], conditions=SAMLConditions{notBefore=2019-12-12T19:53:19.947Z, notOnOrAfter=2019-12-12T20:58:19.947Z}, issuerId='https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/', authnContexts=[urn:oasis:names:tc:SAML:2.0:ac:classes:Password]}, clientName=Microsoft Account, typedIdUsed=false, userProfile=#SAML2Profile# | id: tdemo@myappdev.onmicrosoft.com | attributes: {emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=2019-12-12T20:58:19.947Z, http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=2019-12-12T19:53:19.947Z, username=tdemo@myappdev.onmicrosoft.com} | roles: [] | permissions: [] | isRemembered: false | clientName: Microsoft Account | linkedId: null |)]
tomcat_sandbox1 | ACTION: AUTHENTICATION_SUCCESS
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,410 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These rejected attributes [{}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,410 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These required attributes [{http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,411 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Difference of checking required attributes: [[http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,412 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Checking [[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] against [[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] with pattern [(c1fd6721-cea8-4685-b0e4-7e63f1e1be0c)] for attribute [http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]>
tomcat_sandbox1 | 2019-12-12 19:58:20,414 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: [result=Service Access Granted,service=https://example.com:8081/...,principal=SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}),requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}]
tomcat_sandbox1 | ACTION: SERVICE_ACCESS_ENFORCEMENT_TRIGGERED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,419 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,421 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,422 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,422 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,423 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,424 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,424 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,425 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,425 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,427 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,428 DEBUG [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] - <Resolving candidate authentication event for service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] using [DefaultMultifactorAuthenticationProviderWebflowEventResolver]>
tomcat_sandbox1 | 2019-12-12 19:58:20,428 DEBUG [org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver] - <Resolved single event [success] via [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] for this context>
tomcat_sandbox1 | 2019-12-12 19:58:20,429 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Evaluating authentication principal [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})] for inclusion in result>
tomcat_sandbox1 | 2019-12-12 19:58:20,430 DEBUG [org.apereo.cas.authentication.CoreAuthenticationUtils] - <Merged attributes with the final result as [{emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]}]>
tomcat_sandbox1 | 2019-12-12 19:58:20,430 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Collected principal attributes [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] for inclusion in this result for principal [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:20,430 DEBUG [org.apereo.cas.authentication.CoreAuthenticationUtils] - <Merged attributes with the final result as [{credentialType=[ClientCredential], authenticationMethod=[DelegatedClientAuthenticationHandler], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler]}]>
tomcat_sandbox1 | 2019-12-12 19:58:20,430 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Finalized authentication attributes [{credentialType=[ClientCredential], authenticationMethod=[DelegatedClientAuthenticationHandler], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler]}] for inclusion in this authentication result>
tomcat_sandbox1 | 2019-12-12 19:58:20,431 DEBUG [org.apereo.cas.authentication.DefaultPrincipalElectionStrategy] - <Nominated [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})] as the primary principal>
tomcat_sandbox1 | 2019-12-12 19:58:20,431 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Determined primary authentication principal to be [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,432 DEBUG [org.apereo.cas.web.flow.login.CreateTicketGrantingTicketAction] - <Creating ticket-granting ticket, potentially based on []>
tomcat_sandbox1 | 2019-12-12 19:58:20,437 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Resolved service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] from the authentication request>
tomcat_sandbox1 | 2019-12-12 19:58:20,438 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These rejected attributes [{}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,438 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These required attributes [{http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,438 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Difference of checking required attributes: [[http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,438 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Checking [[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] against [[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] with pattern [(c1fd6721-cea8-4685-b0e4-7e63f1e1be0c)] for attribute [http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]>
tomcat_sandbox1 | 2019-12-12 19:58:20,439 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: [result=Service Access Granted,service=https://example.com:8081/...,principal=SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}),requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}]
tomcat_sandbox1 | ACTION: SERVICE_ACCESS_ENFORCEMENT_TRIGGERED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,440 DEBUG [org.apereo.cas.ticket.expiration.builder.TicketGrantingTicketExpirationPolicyBuilder] - <Ticket-granting ticket expiration policy is based on hard/idle timeouts of [28800]/[7200] seconds>
tomcat_sandbox1 | 2019-12-12 19:58:20,442 DEBUG [org.apereo.cas.ticket.expiration.builder.TicketGrantingTicketExpirationPolicyBuilder] - <Final effective time-to-live of ticket-granting ticket expiration policy is [28800] seconds>
tomcat_sandbox1 | 2019-12-12 19:58:20,442 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TGT-1-*****rmUlGSlpjo-ea09f52e60a4] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:20,443 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: TGT-1-*****rmUlGSlpjo-ea09f52e60a4
tomcat_sandbox1 | ACTION: TICKET_GRANTING_TICKET_CREATED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,445 DEBUG [org.apereo.cas.web.flow.login.SendTicketGrantingTicketAction] - <Setting ticket-granting cookie for current session linked to [TGT-1-*****rmUlGSlpjo-ea09f52e60a4].>
tomcat_sandbox1 | 2019-12-12 19:58:20,451 DEBUG [org.apereo.cas.web.support.gen.CookieRetrievingCookieGenerator] - <Request does not indicate a remember-me authentication event. Locating authentication object from the request context...>
tomcat_sandbox1 | 2019-12-12 19:58:20,452 DEBUG [org.apereo.cas.web.flow.GenerateServiceTicketAction] - <Ticket-granting ticket found in the context is [TGT-1-*****rmUlGSlpjo-ea09f52e60a4]>
tomcat_sandbox1 | 2019-12-12 19:58:20,453 DEBUG [org.apereo.cas.web.flow.GenerateServiceTicketAction] - <Registered service asking for service ticket is [AbstractRegisteredService(serviceId=https://example.com:8081/app\?client_name=CasClient, name=MyApp, theme=null, informationUrl=null, privacyUrl=null, responseType=null, id=8081, description=null, expirationPolicy=DefaultRegisteredServiceExpirationPolicy(deleteWhenExpired=false, notifyWhenDeleted=false, notifyWhenExpired=false, expirationDate=null), proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1, proxyTicketExpirationPolicy=null, serviceTicketExpirationPolicy=null, singleSignOnParticipationPolicy=null, evaluationOrder=0, usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@87297e2, logoutType=BACK_CHANNEL, requiredHandlers=[], environments=[], attributeReleasePolicy=ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0)), multifactorPolicy=DefaultRegisteredServiceMultifactorPolicy(multifactorAuthenticationProviders=[], failureMode=UNDEFINED, principalAttributeNameTrigger=null, principalAttributeValueToMatch=null, bypassEnabled=false, forceExecution=false, bypassTrustedDeviceEnabled=false), logo=null, logoutUrl=null, accessStrategy=DefaultRegisteredServiceAccessStrategy(order=0, enabled=true, ssoEnabled=false, unauthorizedRedirectUrl=null, delegatedAuthenticationPolicy=DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false), requireAllAttributes=false, requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}, rejectedAttributes={}, caseInsensitive=false), publicKey=null, properties={}, contacts=[])]>
tomcat_sandbox1 | 2019-12-12 19:58:20,453 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Evaluating authentication principal [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})] for inclusion in result>
tomcat_sandbox1 | 2019-12-12 19:58:20,454 DEBUG [org.apereo.cas.authentication.CoreAuthenticationUtils] - <Merged attributes with the final result as [{emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]}]>
tomcat_sandbox1 | 2019-12-12 19:58:20,454 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Collected principal attributes [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] for inclusion in this result for principal [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:20,454 DEBUG [org.apereo.cas.authentication.CoreAuthenticationUtils] - <Merged attributes with the final result as [{credentialType=[ClientCredential], authenticationMethod=[DelegatedClientAuthenticationHandler], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler]}]>
tomcat_sandbox1 | 2019-12-12 19:58:20,454 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Finalized authentication attributes [{credentialType=[ClientCredential], authenticationMethod=[DelegatedClientAuthenticationHandler], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler]}] for inclusion in this authentication result>
tomcat_sandbox1 | 2019-12-12 19:58:20,454 DEBUG [org.apereo.cas.authentication.DefaultPrincipalElectionStrategy] - <Nominated [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})] as the primary principal>
tomcat_sandbox1 | 2019-12-12 19:58:20,454 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationResultBuilder] - <Determined primary authentication principal to be [SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,455 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These rejected attributes [{}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,456 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These required attributes [{http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:20,456 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Difference of checking required attributes: [[http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]]>
tomcat_sandbox1 | 2019-12-12 19:58:20,456 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Checking [[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] against [[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] with pattern [(c1fd6721-cea8-4685-b0e4-7e63f1e1be0c)] for attribute [http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]>
tomcat_sandbox1 | 2019-12-12 19:58:20,456 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: [result=Service Access Granted,service=https://example.com:8081/...,requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}]
tomcat_sandbox1 | ACTION: SERVICE_ACCESS_ENFORCEMENT_TRIGGERED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,456 DEBUG [org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - <Service [https://example.com:8081/app?client_name=CasClient] is configured to not use SSO>
tomcat_sandbox1 | 2019-12-12 19:58:20,456 DEBUG [org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - <Current authentication via ticket [TGT-1-*****rmUlGSlpjo-ea09f52e60a4] allows service [https://example.com:8081/app?client_name=CasClient] to participate in the existing SSO session>
tomcat_sandbox1 | 2019-12-12 19:58:20,457 DEBUG [org.apereo.cas.ticket.factory.DefaultServiceTicketFactory] - <Looking up service ticket id generator for [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl]>
tomcat_sandbox1 | 2019-12-12 19:58:20,457 DEBUG [org.apereo.cas.ticket.factory.DefaultServiceTicketFactory] - <Encoded service ticket id [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4]>
tomcat_sandbox1 | 2019-12-12 19:58:20,464 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [TGT-1-*****rmUlGSlpjo-ea09f52e60a4] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:20,464 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] to registry.>
tomcat_sandbox1 | 2019-12-12 19:58:20,464 INFO [org.apereo.cas.DefaultCentralAuthenticationService] - <Granted service ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] for service [https://example.com:8081/app?client_name=CasClient] and principal [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:20,464 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4 for https://example.com:8081/app?client_name=CasClient
tomcat_sandbox1 | ACTION: SERVICE_TICKET_CREATED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:20 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 10.0.27.1
tomcat_sandbox1 | SERVER IP ADDRESS: 10.0.27.3
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:20,464 DEBUG [org.apereo.cas.web.flow.GenerateServiceTicketAction] - <Granted service ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] and added it to the request scope>
tomcat_sandbox1 | 2019-12-12 19:58:20,465 DEBUG [org.apereo.cas.web.flow.actions.RedirectToServiceAction] - <Located service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] from the context>
tomcat_sandbox1 | 2019-12-12 19:58:20,465 DEBUG [org.apereo.cas.web.flow.actions.RedirectToServiceAction] - <Located authentication [org.apereo.cas.authentication.DefaultAuthentication@9499b75f] from the context>
tomcat_sandbox1 | 2019-12-12 19:58:20,465 DEBUG [org.apereo.cas.web.flow.actions.RedirectToServiceAction] - <Located service ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] from the context>
tomcat_sandbox1 | 2019-12-12 19:58:20,465 DEBUG [org.apereo.cas.web.flow.actions.RedirectToServiceAction] - <Located service response builder [org.apereo.cas.authentication.principal.WebApplicationServiceResponseBuilder@b5496c7e] for [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,471 DEBUG [org.apereo.cas.authentication.principal.DefaultResponse] - <Sanitized URL for redirect response is [https://example.com:8081/app?client_name=CasClient]>
tomcat_sandbox1 | 2019-12-12 19:58:20,473 DEBUG [org.apereo.cas.authentication.principal.DefaultResponse] - <Final redirect response is [https://example.com:8081/app?client_name=CasClient&ticket=ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4]>
tomcat_sandbox1 | 2019-12-12 19:58:20,473 DEBUG [org.apereo.cas.web.flow.actions.RedirectToServiceAction] - <Built response [org.apereo.cas.authentication.principal.DefaultResponse@35484fc] for [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})]>
tomcat_sandbox1 | 2019-12-12 19:58:20,473 DEBUG [org.apereo.cas.web.flow.actions.RedirectToServiceAction] - <Signaling flow to redirect to service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] via event [redirect]>
tomcat_sandbox1 | 2019-12-12 19:58:22,783 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Resolved service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] from the authentication request with service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] linked to service ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4]>
tomcat_sandbox1 | 2019-12-12 19:58:22,783 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Attribute policy [ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0))] is associated with service [AbstractRegisteredService(serviceId=https://example.com:8081/app\?client_name=CasClient, name=MyApp, theme=null, informationUrl=null, privacyUrl=null, responseType=null, id=8081, description=null, expirationPolicy=DefaultRegisteredServiceExpirationPolicy(deleteWhenExpired=false, notifyWhenDeleted=false, notifyWhenExpired=false, expirationDate=null), proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1, proxyTicketExpirationPolicy=null, serviceTicketExpirationPolicy=null, singleSignOnParticipationPolicy=null, evaluationOrder=0, usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@87297e2, logoutType=BACK_CHANNEL, requiredHandlers=[], environments=[], attributeReleasePolicy=ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0)), multifactorPolicy=DefaultRegisteredServiceMultifactorPolicy(multifactorAuthenticationProviders=[], failureMode=UNDEFINED, principalAttributeNameTrigger=null, principalAttributeValueToMatch=null, bypassEnabled=false, forceExecution=false, bypassTrustedDeviceEnabled=false), logo=null, logoutUrl=null, accessStrategy=DefaultRegisteredServiceAccessStrategy(order=0, enabled=true, ssoEnabled=false, unauthorizedRedirectUrl=null, delegatedAuthenticationPolicy=DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false), requireAllAttributes=false, requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}, rejectedAttributes={}, caseInsensitive=false), publicKey=null, properties={}, contacts=[])]>
tomcat_sandbox1 | 2019-12-12 19:58:22,784 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Initiating attributes release phase for principal [tdemo@myappdev.onmicrosoft.com] accessing service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] defined by registered service [https://example.com:8081/app\?client_name=CasClient]...>
tomcat_sandbox1 | 2019-12-12 19:58:22,784 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Using principal attribute repository [DefaultPrincipalAttributesRepository()] to retrieve attributes>
tomcat_sandbox1 | 2019-12-12 19:58:22,786 DEBUG [org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository] - <Using [tdemo@myappdev.onmicrosoft.com], no caching takes place for [DefaultPrincipalAttributesRepository] to add attributes.>
tomcat_sandbox1 | 2019-12-12 19:58:22,786 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Found principal attributes [{emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]}] for [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:22,787 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Attribute policy [ReturnAllAttributeReleasePolicy] allows release of [{emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], fullName=[Test Demo], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], username=[tdemo@myappdev.onmicrosoft.com]}] for [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:22,788 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Default attributes for release are: [[]]>
tomcat_sandbox1 | 2019-12-12 19:58:22,789 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Default attributes found to be released are [{}]>
tomcat_sandbox1 | 2019-12-12 19:58:22,789 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Finalizing attributes release phase for principal [tdemo@myappdev.onmicrosoft.com] accessing service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] defined by registered service [https://example.com:8081/app\?client_name=CasClient]...>
tomcat_sandbox1 | 2019-12-12 19:58:22,789 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Final collection of attributes allowed are: [{emailAddress=[tdemo@myappdev.onmicrosoft.com], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], notBefore=[2019-12-12T19:53:19.947Z], notOnOrAfter=[2019-12-12T20:58:19.947Z], username=[tdemo@myappdev.onmicrosoft.com], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}]>
tomcat_sandbox1 | 2019-12-12 19:58:22,789 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Calculated attributes for release per the release policy are [[emailAddress, fullName, http://schemas.microsoft.com/claims/authnmethodsreferences, http://schemas.microsoft.com/identity/claims/identityprovider, http://schemas.microsoft.com/identity/claims/tenantid, http://schemas.microsoft.com/ws/2008/06/identity/claims/groups, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname, notBefore, notOnOrAfter, username, uuid]]>
tomcat_sandbox1 | 2019-12-12 19:58:22,789 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider] - <Returning the default principal id [tdemo@myappdev.onmicrosoft.com] for username.>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.BaseRegisteredServiceUsernameAttributeProvider] - <Resolved username for [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] is [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider] - <Returning the default principal id [tdemo@myappdev.onmicrosoft.com] for username.>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.BaseRegisteredServiceUsernameAttributeProvider] - <Resolved username for [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})] is [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Principal determined for release to [https://example.com:8081/app\?client_name=CasClient] is [tdemo@myappdev.onmicrosoft.com]>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These rejected attributes [{}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <These required attributes [{http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}] are examined against [{http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationMethod=[DelegatedClientAuthenticationHandler], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], notOnOrAfter=[2019-12-12T20:58:19.947Z], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], username=[tdemo@myappdev.onmicrosoft.com]}] before service can proceed.>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Difference of checking required attributes: [[http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]]>
tomcat_sandbox1 | 2019-12-12 19:58:22,790 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Checking [[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] against [[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]] with pattern [(c1fd6721-cea8-4685-b0e4-7e63f1e1be0c)] for attribute [http://schemas.microsoft.com/ws/2008/06/identity/claims/groups]>
tomcat_sandbox1 | 2019-12-12 19:58:22,791 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: audit:unknown
tomcat_sandbox1 | WHAT: [result=Service Access Granted,service=https://example.com:8081/...,principal=SimplePrincipal(id=tdemo@myappdev.onmicrosoft.com, attributes={emailAddress=[tdemo@myappdev.onmicrosoft.com], fullName=[Test Demo], http://schemas.microsoft.com/claims/authnmethodsreferences=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], http://schemas.microsoft.com/identity/claims/identityprovider=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], http://schemas.microsoft.com/identity/claims/tenantid=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=[Test], http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=[Demo], notBefore=[2019-12-12T19:53:19.947Z], notOnOrAfter=[2019-12-12T20:58:19.947Z], username=[tdemo@myappdev.onmicrosoft.com], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe]}),requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}]
tomcat_sandbox1 | ACTION: SERVICE_ACCESS_ENFORCEMENT_TRIGGERED
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:22 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 127.0.0.1
tomcat_sandbox1 | SERVER IP ADDRESS: 127.0.0.1
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:22,792 DEBUG [org.apereo.cas.ticket.expiration.MultiTimeUseOrTimeoutExpirationPolicy] - <Ticket usage count [1] is greater than or equal to [1]. Ticket has expired>
tomcat_sandbox1 | 2019-12-12 19:58:22,792 DEBUG [org.apereo.cas.ticket.expiration.MultiTimeUseOrTimeoutExpirationPolicy] - <Ticket usage count [1] is greater than or equal to [1]. Ticket has expired>
tomcat_sandbox1 | 2019-12-12 19:58:22,793 DEBUG [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] has expired and is now removed from the ticket registry>
tomcat_sandbox1 | 2019-12-12 19:58:22,793 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <The condition enforced by the predicate [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] cannot successfully accept/test the ticket id [AbstractTicketRegistry$$Lambda$1603/0x00000008014dcc40]>
tomcat_sandbox1 | 2019-12-12 19:58:22,793 DEBUG [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] could not be fetched from the registry; it may have been expired and deleted.>
tomcat_sandbox1 | 2019-12-12 19:58:22,793 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4 for https://example.com:8081/app?client_name=CasClient
tomcat_sandbox1 | ACTION: SERVICE_TICKET_VALIDATE_SUCCESS
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:22 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 127.0.0.1
tomcat_sandbox1 | SERVER IP ADDRESS: 127.0.0.1
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:22,811 DEBUG [org.apereo.cas.validation.DelegatedAuthenticationServiceTicketValidationAuthorizer] - <Evaluating service [AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={})] for delegated authentication policy>
tomcat_sandbox1 | 2019-12-12 19:58:22,811 DEBUG [org.apereo.cas.validation.DelegatedAuthenticationServiceTicketValidationAuthorizer] - <Evaluating delegated authentication policy [DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false)] for client [Microsoft Account] and service [AbstractRegisteredService(serviceId=https://example.com:8081/app\?client_name=CasClient, name=MyApp, theme=null, informationUrl=null, privacyUrl=null, responseType=null, id=8081, description=null, expirationPolicy=DefaultRegisteredServiceExpirationPolicy(deleteWhenExpired=false, notifyWhenDeleted=false, notifyWhenExpired=false, expirationDate=null), proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1, proxyTicketExpirationPolicy=null, serviceTicketExpirationPolicy=null, singleSignOnParticipationPolicy=null, evaluationOrder=0, usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@87297e2, logoutType=BACK_CHANNEL, requiredHandlers=[], environments=[], attributeReleasePolicy=ReturnAllAttributeReleasePolicy(super=AbstractRegisteredServiceAttributeReleasePolicy(attributeFilter=null, principalAttributesRepository=DefaultPrincipalAttributesRepository(), consentPolicy=DefaultRegisteredServiceConsentPolicy(enabled=true, excludedAttributes=null, includeOnlyAttributes=null, order=0), authorizedToReleaseCredentialPassword=false, authorizedToReleaseProxyGrantingTicket=false, excludeDefaultAttributes=false, authorizedToReleaseAuthenticationAttributes=true, principalIdAttribute=null, order=0)), multifactorPolicy=DefaultRegisteredServiceMultifactorPolicy(multifactorAuthenticationProviders=[], failureMode=UNDEFINED, principalAttributeNameTrigger=null, principalAttributeValueToMatch=null, bypassEnabled=false, forceExecution=false, bypassTrustedDeviceEnabled=false), logo=null, logoutUrl=null, accessStrategy=DefaultRegisteredServiceAccessStrategy(order=0, enabled=true, ssoEnabled=false, unauthorizedRedirectUrl=null, delegatedAuthenticationPolicy=DefaultRegisteredServiceDelegatedAuthenticationPolicy(allowedProviders=[Microsoft Account], permitUndefined=true, exclusive=false), requireAllAttributes=false, requiredAttributes={http://schemas.microsoft.com/ws/2008/06/identity/claims/groups=[c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], userType=[LOCAL]}, rejectedAttributes={}, caseInsensitive=false), publicKey=null, properties={}, contacts=[])]>
tomcat_sandbox1 | 2019-12-12 19:58:22,812 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | WHO: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | WHAT: [result=Client Access Granted,client=Microsoft Account,registeredService=MyApp:https://example.com:8081/app\?client_name=CasClient]
tomcat_sandbox1 | ACTION: DELEGATED_CLIENT_SUCCESS
tomcat_sandbox1 | APPLICATION: CAS
tomcat_sandbox1 | WHEN: Thu Dec 12 19:58:22 UTC 2019
tomcat_sandbox1 | CLIENT IP ADDRESS: 127.0.0.1
tomcat_sandbox1 | SERVER IP ADDRESS: 127.0.0.1
tomcat_sandbox1 | =============================================================
tomcat_sandbox1 | 
tomcat_sandbox1 | >
tomcat_sandbox1 | 2019-12-12 19:58:22,813 DEBUG [org.apereo.cas.authentication.DefaultRequestedAuthenticationContextValidator] - <No particular authentication context is required for this request>
tomcat_sandbox1 | 2019-12-12 19:58:22,813 DEBUG [org.apereo.cas.web.AbstractServiceValidateController] - <No service credentials specified, and/or the proxy handler [org.apereo.cas.ticket.proxy.support.Cas20ProxyHandler@2c8bedfd] cannot handle credentials>
tomcat_sandbox1 | 2019-12-12 19:58:22,813 DEBUG [org.apereo.cas.web.AbstractServiceValidateController] - <Successfully validated service ticket [ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4] for service [https://example.com:8081/app?client_name=CasClient]>
tomcat_sandbox1 | 2019-12-12 19:58:22,815 DEBUG [org.apereo.cas.web.view.Cas30ResponseView] - <View name 'cas3ServiceSuccessView', model {assertion=ImmutableAssertion(primaryAuthentication=org.apereo.cas.authentication.DefaultAuthentication@9499b75f, chainedAuthentications=[org.apereo.cas.authentication.DefaultAuthentication@9499b75f], fromNewLogin=true, service=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=null, principal=tdemo@myappdev.onmicrosoft.com, source=service, loggedOutAlready=false, format=XML, attributes={})), service=AbstractWebApplicationService(id=https://example.com:8081/app?client_name=CasClient, originalUrl=https://example.com:8081/app?client_name=CasClient, artifactId=ST-1-ziwBVQqF7zhKA8Gsz1xy7VVuZuI-ea09f52e60a4, principal=null, source=service, loggedOutAlready=false, format=XML, attributes={}), org.springframework.validation.BindingResult.assertion=org.springframework.validation.BeanPropertyBindingResult: 0 errors, org.springframework.validation.BindingResult.service=org.springframework.validation.BeanPropertyBindingResult: 0 errors}>
tomcat_sandbox1 | 2019-12-12 19:58:22,816 DEBUG [org.apereo.cas.services.web.view.AbstractDelegatingCasView] - <Preparing the output model [[assertion, service, org.springframework.validation.BindingResult.assertion, org.springframework.validation.BindingResult.service]] to render view [Cas30ResponseView]>
tomcat_sandbox1 | 2019-12-12 19:58:22,816 DEBUG [org.apereo.cas.services.web.view.AbstractCasView] - <Final collection of attributes for the response are [[isFromNewLogin, authenticationDate, http://schemas.microsoft.com/identity/claims/identityprovider, clientName, successfulAuthenticationHandlers, fullName, http://schemas.microsoft.com/claims/authnmethodsreferences, uuid, notBefore, credentialType, emailAddress, http://schemas.microsoft.com/ws/2008/06/identity/claims/groups, http://schemas.microsoft.com/identity/claims/tenantid, authenticationMethod, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname, notOnOrAfter, longTermAuthenticationRequestTokenUsed, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname, username]].>
tomcat_sandbox1 | 2019-12-12 19:58:22,819 INFO [org.apereo.cas.authentication.support.DefaultCasProtocolAttributeEncoder] - <Found [[(_687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f636c61696d732f617574686e6d6574686f64737265666572656e636573,[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password]), (_687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f6964656e746974792f636c61696d732f6964656e7469747970726f7669646572,[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/]), (_687474703a2f2f736368656d61732e786d6c736f61702e6f72672f77732f323030352f30352f6964656e746974792f636c61696d732f7375726e616d65,[Demo]), (_687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f77732f323030382f30362f6964656e746974792f636c61696d732f67726f757073,[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c]), (_687474703a2f2f736368656d61732e786d6c736f61702e6f72672f77732f323030352f30352f6964656e746974792f636c61696d732f676976656e6e616d65,[Test]), (_687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f6964656e746974792f636c61696d732f74656e616e746964,[f8f35f5d-1f7b-4427-90f7-f4565c5177aa])]] attribute(s) that need to be sanitized/encoded.>
tomcat_sandbox1 | 2019-12-12 19:58:22,821 DEBUG [org.apereo.cas.authentication.support.AbstractProtocolAttributeEncoder] - <[19] encoded attributes are available for release to [MyApp]: [[isFromNewLogin, _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f6964656e746974792f636c61696d732f74656e616e746964, authenticationDate, clientName, successfulAuthenticationHandlers, _687474703a2f2f736368656d61732e786d6c736f61702e6f72672f77732f323030352f30352f6964656e746974792f636c61696d732f676976656e6e616d65, fullName, _687474703a2f2f736368656d61732e786d6c736f61702e6f72672f77732f323030352f30352f6964656e746974792f636c61696d732f7375726e616d65, uuid, _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f636c61696d732f617574686e6d6574686f64737265666572656e636573, notBefore, credentialType, emailAddress, _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f77732f323030382f30362f6964656e746974792f636c61696d732f67726f757073, authenticationMethod, notOnOrAfter, longTermAuthenticationRequestTokenUsed, _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f6964656e746974792f636c61696d732f6964656e7469747970726f7669646572, username]]>
tomcat_sandbox1 | 2019-12-12 19:58:22,821 DEBUG [org.apereo.cas.services.web.view.AbstractCasView] - <Encoded attributes for the response are [{isFromNewLogin=[true], _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f6964656e746974792f636c61696d732f74656e616e746964=[f8f35f5d-1f7b-4427-90f7-f4565c5177aa], authenticationDate=[2019-12-12T19:58:20.432047Z], clientName=[Microsoft Account], successfulAuthenticationHandlers=[DelegatedClientAuthenticationHandler], _687474703a2f2f736368656d61732e786d6c736f61702e6f72672f77732f323030352f30352f6964656e746974792f636c61696d732f676976656e6e616d65=[Test], fullName=[Test Demo], _687474703a2f2f736368656d61732e786d6c736f61702e6f72672f77732f323030352f30352f6964656e746974792f636c61696d732f7375726e616d65=[Demo], uuid=[263ab39d-f0ef-4477-ac4d-87862971fcbe], _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f636c61696d732f617574686e6d6574686f64737265666572656e636573=[http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password], notBefore=[2019-12-12T19:53:19.947Z], credentialType=[ClientCredential], emailAddress=[tdemo@myappdev.onmicrosoft.com], _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f77732f323030382f30362f6964656e746974792f636c61696d732f67726f757073=[a7ee0c5f-b44f-417d-8506-920a2cc1d44a, c1fd6721-cea8-4685-b0e4-7e63f1e1be0c], authenticationMethod=[DelegatedClientAuthenticationHandler], notOnOrAfter=[2019-12-12T20:58:19.947Z], longTermAuthenticationRequestTokenUsed=[false], _687474703a2f2f736368656d61732e6d6963726f736f66742e636f6d2f6964656e746974792f636c61696d732f6964656e7469747970726f7669646572=[https://sts.windows.net/f8f35f5d-1f7b-4427-90f7-f4565c5177aa/], username=[tdemo@myappdev.onmicrosoft.com]}]>
tomcat_sandbox1 | [https-openssl-apr-8443-exec-10] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-1] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [https-openssl-apr-8443-exec-5] INFO org.reflections.Reflections - Reflections took 46 ms to scan 1 urls, producing 4 keys and 46 values 
tomcat_sandbox1 | [https-openssl-apr-8443-exec-1] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [https-openssl-apr-8443-exec-1] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-3] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-2] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
mongo_sandbox1 | 2019-12-12T19:58:24.125+0000 I NETWORK  [thread1] connection accepted from 10.0.27.3:49978 #6 (6 connections now open)
mongo_sandbox1 | 2019-12-12T19:58:24.126+0000 I NETWORK  [conn6] received client metadata from 10.0.27.3:49978 conn6: { driver: { name: "mongo-java-driver|legacy", version: "3.10.2" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.15.0-72-generic" }, platform: "Java/Oracle Corporation/11.0.5+10" }
tomcat_sandbox1 | [http-nio-8080-exec-3] INFO org.mongodb.driver.connection - Opened connection [connectionId{localValue:3, serverValue:6}] to myapp-mongo:27017
tomcat_sandbox1 | [http-nio-8080-exec-4] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-5] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-6] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-7] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-8] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-9] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
tomcat_sandbox1 | [http-nio-8080-exec-10] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
mongo_sandbox1 | 2019-12-12T19:58:26.776+0000 I NETWORK  [thread1] connection accepted from 10.0.27.3:50000 #7 (7 connections now open)
mongo_sandbox1 | 2019-12-12T19:58:26.779+0000 I NETWORK  [thread1] connection accepted from 10.0.27.3:50002 #8 (8 connections now open)
tomcat_sandbox1 | [http-nio-8080-exec-1] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com
mongo_sandbox1 | 2019-12-12T19:58:26.782+0000 I NETWORK  [conn8] received client metadata from 10.0.27.3:50002 conn8: { driver: { name: "mongo-java-driver|legacy", version: "3.10.2" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.15.0-72-generic" }, platform: "Java/Oracle Corporation/11.0.5+10" }
tomcat_sandbox1 | [https-openssl-apr-8443-exec-9] INFO org.mongodb.driver.connection - Opened connection [connectionId{localValue:4, serverValue:8}] to myapp-mongo:27017
mongo_sandbox1 | 2019-12-12T19:58:26.796+0000 I NETWORK  [conn7] received client metadata from 10.0.27.3:50000 conn7: { driver: { name: "mongo-java-driver|legacy", version: "3.10.2" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.15.0-72-generic" }, platform: "Java/Oracle Corporation/11.0.5+10" }
tomcat_sandbox1 | [https-openssl-apr-8443-exec-3] INFO org.mongodb.driver.connection - Opened connection [connectionId{localValue:3, serverValue:7}] to myapp-mongo:27017
mongo_sandbox1 | 2019-12-12T19:58:26.806+0000 I NETWORK  [thread1] connection accepted from 10.0.27.3:50004 #9 (9 connections now open)
mongo_sandbox1 | 2019-12-12T19:58:26.806+0000 I NETWORK  [conn9] received client metadata from 10.0.27.3:50004 conn9: { driver: { name: "mongo-java-driver|legacy", version: "3.10.2" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.15.0-72-generic" }, platform: "Java/Oracle Corporation/11.0.5+10" }
mongo_sandbox1 | 2019-12-12T19:58:26.808+0000 I NETWORK  [thread1] connection accepted from 10.0.27.3:50006 #10 (10 connections now open)
mongo_sandbox1 | 2019-12-12T19:58:26.809+0000 I NETWORK  [conn10] received client metadata from 10.0.27.3:50006 conn10: { driver: { name: "mongo-java-driver|legacy", version: "3.10.2" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.15.0-72-generic" }, platform: "Java/Oracle Corporation/11.0.5+10" }
tomcat_sandbox1 | [https-openssl-apr-8443-exec-9] INFO org.mongodb.driver.connection - Opened connection [connectionId{localValue:5, serverValue:9}] to myapp-mongo:27017
tomcat_sandbox1 | [https-openssl-apr-8443-exec-8] INFO org.mongodb.driver.connection - Opened connection [connectionId{localValue:6, serverValue:10}] to myapp-mongo:27017
tomcat_sandbox1 | [http-nio-8080-exec-2] INFO org.pac4j.core.profile.ProfileHelper - Building user profile based on typedId: com.example.auth.cas.profile.SraProfile#tdemo@myappdev.onmicrosoft.com