Issue with nested group on Access Manger when integrated with Advanced Authentication.

Hi.

The Advanced Authentication (AA) and Access Manager (AM) are integrated with OAuth-based approach. AM is connected with Active Directory (AD) userstore resource. Users in AD are related with nested groups. For that reason Virtual attribute is configured on AM with Attribute Source query (member:1.2.840.113556.1.4.1941:=%P2%). Parameter value is set to LDAP User DN from Credential Profile. This values are used for activating roles in IDP role policies.

This function work fine if User use authentication on AM Identity Provider. But when User authenticate on AA no roles are set. In the IDP catalina output I noticed that query for Nested Groups with member filter is executed with no values.

Base context: OU=Group2,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

This is catalina.out log from IDP.

With the input parameter values obtained above , invoking the Attribute Source service to get the value for Attribute Source 'Nested groups AA NAM ORG' </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.AttributeQueryService: Executing query:(member:1.2.840.113556.1.4.1941:=xxxx) </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group1,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group2,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group3,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group4,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group5,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group6,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group7,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Base context: OU=Group8,DC=ORG,DC=LAN, Filter: (member:1.2.840.113556.1.4.1941:=), Scope: 2, Request Controls: null, UserId: CN=SA,OU=ORG,OU=Users,DC=ORG,DC=LAN </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
getNextConnection() attempting to get preferred replica from the IPreferredReplica interface </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Try connection: ldaps://xxx.yyy.zzz.www </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: JNDILogEventListener.accept
Thread: ajp-nio-127.0.0.1-9019-exec-11
Found 0 results! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.AttributeQueryService: Query output:Empty </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS WSP:
Method: LDAPAuthorityLdap.A
Thread: ajp-nio-127.0.0.1-9019-exec-11
</amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS WSP:
Method: LDAPAuthorityLdap.A
Thread: ajp-nio-127.0.0.1-9019-exec-11
Invoking Javascript Engine to run the script </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.VirtualAttrScriptEngine: In javascript Engine </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.VirtualAttrScriptEngine: No value provided for input parameter :P2passing it as empty in the script </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.VirtualAttrScriptEngine: Input parameter map :
P2 -> Attribute Sources-Nested groups AA NAM ORG:distinguishedNameAA
</amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.VirtualAttrScriptEngine: Input values to the script are :
var P2 = '' ; </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.VirtualAttrScriptEngine: Script to run is :var vaJavaLib ;
try{
var javaLib = Java.type('com.netiq.nam.common.util.virtualAttributes.lib.java.VAJavaLib');
vaJavaLib = new javaLib();
}catch(err){}

var result = main(P2);

function main(P2){
return convertInputToOutput( P2);
}
function convertInputToOutput (attribute){
var result ;
if(attribute instanceof Array){
result = [];
for(var i=0; i<attribute.length; i++)
result[i] = attribute[i];
}else{
result = attribute;
}
return result;
} </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Session Logger: com.netiq.nam.common.util.virtualAttributes.VirtualAttrScriptEngine: Running script : complete </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS WSP:
Method: LDAPAuthorityLdap.A
Thread: ajp-nio-127.0.0.1-9019-exec-11
Calculated the value of the Virtual attribute Nested groups ORG NAM AA successfully
Value is : [] </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS WSC:
Method: WSCQRequestThread.lookupAtLocalService
Thread: ajp-nio-127.0.0.1-9019-exec-11
Local Response:
<ldap:QueryResponse(urn:novell:ldap:2006-02)>:ns=urn:novell:ldap:2006-02 nspfx=ldap itemIdRef=kojpbi773ac3td timeStamp=2021-05-11T07:17:22Z
<ldap:Status(urn:novell:ldap:2006-02)>:code=ldap:OK
<ldap:Data(urn:novell:ldap:2006-02)>:
Markup (Count: 1):
UniqueId: kojpbi78qjp3tf
Markup: Name: IDSISISMetaDataPolicy
access:
Never
requestor name: local
requestor id: local
xpath: /VirtualAttribute[@ldap:targetAttribute="Nested groups ORG NAM AA"]
display name: Unknown
itemIdRef: NEPXurn~3Anovell~3Aldap~3A2006-02~2Fldap~3AVirtualAttribute~40~40~40~40WSCQLDAPToken~40~40~40~40~2FVirtualAttribute~5B~40ldap~3AtargetAttribute~3D~22Nested+groups+ORG+NAM+AA~22~5D </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS WSC:
Method: WSCQRequestThread.lookupAtLocalService
Thread: ajp-nio-127.0.0.1-9019-exec-11
Response removed because null or zero objects! </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS WSC:
Method: WSC.A
Thread: ajp-nio-127.0.0.1-9019-exec-11
Completed Request. Response: WSCResponse:
Status: All Failure
WSCQResponseEntry:
WSCQLDAPToken:
Model Entry: VirtualAttribute
Unique Id: NEPXurn~3Anovell~3Aldap~3A2006-02~2Fldap~3AVirtualAttribute~40~40~40~40WSCQLDAPToken~40~40~40~40~2FVirtualAttribute~5B~40ldap~3AtargetAttribute~3D~22Nested+groups+ORG+NAM+AA~22~5D
Select String: /VirtualAttribute[@ldap:targetAttribute="Nested groups ORG NAM AA"]

Status: DataNotAvailable
WSCQResponse: </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Application: AM#500199050: AMDEVICEID#60481AFC4A205621: AMAUTHID#2ae4861b402b0ee2ee85e703f95ff978b5e42d2047365f55d635067e0646fbb8: IDP RolesPep.evaluate(), policy trace:
~~RL~1~~~~Rule Count: 15~~Success(67)
~~RU~RuleID_1593430012009~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~2~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~2~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_162021165804600~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~2~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~2~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1593430109561~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_162021165804601~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1593430300943~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_162021165804602~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1593430360787~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1620315191652~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1593430407795~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~2~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~2~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_162021165804603~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~2~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~2~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1593430491875~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~3~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~2~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~3~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1617876888003~role-NAM-ORG~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_162021165804604~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~3~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~2~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~CO~3~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_1620372364752~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
~~RU~RuleID_162021165804605~role-NAM-ORG-AA~CNF~~1:1~~Success(67)
~~CS~1~~ORs~~1~~False(68)
~~CO~1~virtualAttribute(6648):hidden-param:hidden-value:~com.novell.nxpe.condition.NxpeOperator@string-equals~(0):hidden-param:hidden-value:~~~False(68)
</amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z INFO NIDS Application: AM#500105013: AMDEVICEID#60481AFC4A205621: AMAUTHID#2ae4861b402b0ee2ee85e703f95ff978b5e42d2047365f55d635067e0646fbb8: Authenticated user CN=User Test,OU=ORG,OU=Users,DC=ORG,DC=LAN in User Store ORG-AD with
roles "authenticated". </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: CacheMap.A
Thread: ajp-nio-127.0.0.1-9019-exec-11

Retrieval of object com.novell.nidp.NIDPSubject@19a786d9 from cache subject succeeded using key 9146f9c680f13a185f7c3f6b2e2fb7e8c84114796215c2e7995681e2c4d95cab. Cache size is 122
</amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: SwapHashMap.get
Thread: ajp-nio-127.0.0.1-9019-exec-11
Object gotten from in memory HashMap: Key: 2ae4861b402b0ee2ee85e703f95ff978b5e42d2047365f55d635067e0646fbb8, Object: null </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: SwapHashMap.get
Thread: ajp-nio-127.0.0.1-9019-exec-11
Object gotten from swap file: Key: 2ae4861b402b0ee2ee85e703f95ff978b5e42d2047365f55d635067e0646fbb8, low memory: false, Object: null </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: NIDPLocalConfigUtil.getSaml2TPValueBoolean
Thread: ajp-nio-127.0.0.1-9019-exec-11
[nidpconfig.properties] Options - ->SAML2_RESPONSE_AVOID_REMOVE_EXTRANEOUS_NAMESPACES value returned: false </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: NIDPLocalConfigUtil.getSaml2TPValueBoolean
Thread: ajp-nio-127.0.0.1-9019-exec-11
[nidpconfig.properties] Options - ->SAML2_RESPONSE_AVOID_REMOVE_EXTRANEOUS_NAMESPACES value returned: false </amLogEntry>

<amLogEntry> 2021-05-11T07:17:22Z DEBUG NIDS Application:
Method: DMessageBus.A
Thread: ajp-nio-127.0.0.1-9019-exec-11
Sending DMessageBus Message: Mode: Get None

Any idea?

Gregor