Hi Friends,

Runtime : JBOSS EAP 7.1, in build picketLink and Chrome.

We enabled , SP Initiated Web SSO with IDP and we are able to get the SAML response from IDP. IDP posting the saml response in Base64 Encoded format. While Chrome posting the SAML Response to Service Provider, Service provider not able to read the SAML response.

Picketlink at Service provider end responding 302 http status to browser while posting SAML response to Service Provider. Due to 302, Service provider http redirect to the page, which is mentioned in the Location header. Due to redirect via GET, SAML response getting lost.

Please find the details Logs.

Chrome Browser Log :
1) While Posting to Server Provider:

Request :

Request URL: https://serviceProvider.com:8583/SECUI/jaxrs/Authentication
Request Method: POST
Status Code: 302 Found
Remote Address: 10.23.219.243:8583
Referrer Policy: no-referrer-when-downgrade

Response Header :

Access-Control-Allow-Origin: https://IdentyProvider.com
Cache-Control: max-age=0
Connection: Keep-Alive
Content-Length: 0
Date: Wed, 25 Mar 2020 05:49:06 GMT
Expires: 0
Keep-Alive: timeout=15, max=1500
Location: https://serviceProvider.com:8583/SECUI/UI/index.htm
Pragma: no-cache
Server: JBCS httpd
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

Request Header :

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cache-Control: max-age=0
Connection: keep-alive
Content-Length: 6627
Content-Type: application/x-www-form-urlencoded
Cookie: secure=vReGx1TlykEsdWTMHUr3Y7TGMcDVekUasOvNnbAt.CAT_ICM_HUB_SEC_01; amlbcookie=01; iPlanetDirectoryPro=pa8p9OjugxK8YgBtiTAmClm9-dc.AAJTSQACMDUAAlNLABxKMXNTaU1mOWhteWEwK0FaWFhwaTBwTGFvbHM9AAR0eXBlAANDVFMAAlMxAAIwMQ..
DNT: 1
Host: serviceProvider.com:8583
Origin: https://IdentyProvider.com:8443
Referer: https://IdentyProvider.com:8443/openam/SSOPOST/metaAlias/SSO/idp4?ReqID=ID_03fe131e-b20e-4955-8626-df21adfb4dfa&index=null&acsURL=https://serviceProvider.com:8583/SECUI/jaxrs/Authentication&spEntityID=https://serviceProvider.com:8583/SECUI/jaxrs/Authentication&binding=urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.122 Safari/537.36

SAMLResponse: PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6
cHJvdG9jb2wiIElEPSJzMmIyYmZiOGZjOWEyMzI3MGU4OTgwMGExNTZhOTQ3ZWIxMGNkZTU2Zjgi
IEluUmVzcG9uc2VUbz0iSURfMDNmZTEzMWUtYjIwZS00OTU1LTg2MjYtZGYyMWFkZmI0ZGZhIiBW
ZXJzaW9uPSIyLjAiIElzc3VlSW5zdGFudD0iMjAyMC0wMy0yNVQwNTo0OTowNFoiIERlc3RpbmF0
aW9uPSJodHRwczovL2hrbHZhdWFwcDE3NS5oay5zdGFuZGFyZGNoYXJ0ZXJlZC5jb206ODU4My9T
RUNVSS9qYXhycy9BdXRoZW50aWNhdGlvbiI+PHNhbWw6SXNzdWVyIHhtbG5zOnNhbWw9InVybjpv
YXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iPlNTTy1JRFA8L3NhbWw6SXNzdWVyPjxz
Y

JBOSS & HTTP log

JBOSS LOG:

13:48:56,374 DEBUG [org.jboss.modcluster] (UndertowEventHandlerAdapter - 1) MODCLUSTER000009: Sending STATUS for default-server
13:48:56,381 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG
13:48:57,381 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG
13:49:02,385 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG
13:49:02,528 DEBUG [org.picketlink.common] (Timer-2) Loading PicketLink configuration from [/WEB-INF/picketlink.xml].
13:49:02,528 INFO [org.picketlink.common] (Timer-2) Service Provider is setting the CanonicalizationMethod on XMLSignatureUtil::http://www.w3.org/2001/10/xml-exc-c14n#WithComments
13:49:05,653 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG
13:49:05,653 DEBUG [io.undertow.request] (default I/O-12) Matched prefix path /SECUI for path /SECUI/jaxrs/Authentication
13:49:05,655 DEBUG [io.undertow.request.security] (default task-70) Security constraints for request /SECUI/jaxrs/Authentication are [SingleConstraintMatch

]
13:49:07,015 DEBUG [io.undertow.request.security] (default task-71) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/index.htm request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,015 DEBUG [io.undertow.request.security] (default task-71) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/index.htm request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,015 DEBUG [io.undertow.request.security] (default task-71) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/index.htm request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:07,015 DEBUG [io.undertow.request.security] (default task-71) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/index.htm request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,015 DEBUG [io.undertow.request.security] (default task-71) Authenticated as 1575777, roles []
13:49:07,016 DEBUG [io.undertow.request.security] (default task-71) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/index.htm request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,016 DEBUG [io.undertow.request.security] (default task-71) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/index.htm request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,223 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG
13:49:07,224 DEBUG [io.undertow.request] (default I/O-12) Matched prefix path /SECUI for path /SECUI/UI/css/bootstrap.3.3.7.css
13:49:07,224 DEBUG [io.undertow.request.security] (default task-72) Security constraints for request /SECUI/UI/css/bootstrap.3.3.7.css are [SingleConstraintMatch

]
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/css/materialize.0.97.8.css request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/css/materialize.0.97.8.css request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/css/materialize.0.97.8.css request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/css/materialize.0.97.8.css request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Authenticated as 1575777, roles []
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/css/materialize.0.97.8.css request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,245 DEBUG [io.undertow.request.security] (default task-73) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/css/materialize.0.97.8.css request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,618 DEBUG [io.undertow.request] (default I/O-4) Received CPING, sending CPONG
13:49:07,619 DEBUG [io.undertow.request] (default I/O-4) Matched prefix path /SECUI for path /SECUI/UI/index.css
13:49:07,619 DEBUG [io.undertow.request.security] (default task-74) Security constraints for request /SECUI/UI/index.css are [SingleConstraintMatch

]
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/js/angular.1.5.7.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/js/angular.1.5.7.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/js/angular.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/js/angular.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Authenticated as 1575777, roles []
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/js/angular.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,658 DEBUG [io.undertow.request.security] (default task-75) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/js/angular.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,679 DEBUG [io.undertow.request] (default I/O-4) Received CPING, sending CPONG
13:49:07,679 DEBUG [io.undertow.request] (default I/O-4) Matched prefix path /SECUI for path /SECUI/UI/js/angular-cookies.1.5.7.js
13:49:07,680 DEBUG [io.undertow.request.security] (default task-76) Security constraints for request /SECUI/UI/js/angular-cookies.1.5.7.js are [SingleConstraintMatch

]
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/js/angular-route.1.5.7.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/js/angular-route.1.5.7.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/js/angular-route.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/js/angular-route.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Authenticated as 1575777, roles []
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/js/angular-route.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,706 DEBUG [io.undertow.request.security] (default task-77) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/js/angular-route.1.5.7.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:07,768 DEBUG [io.undertow.request] (default I/O-4) Received CPING, sending CPONG
13:49:07,768 DEBUG [io.undertow.request] (default I/O-4) Matched prefix path /SECUI for path /SECUI/UI/index.js
13:49:07,769 DEBUG [io.undertow.request.security] (default task-78) Security constraints for request /SECUI/UI/index.js are [SingleConstraintMatch

]
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/js/jQuery.3.1.1.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/js/jQuery.3.1.1.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/js/jQuery.3.1.1.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/js/jQuery.3.1.1.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Authenticated as 1575777, roles []
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/js/jQuery.3.1.1.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,317 DEBUG [io.undertow.request.security] (default task-79) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/js/jQuery.3.1.1.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,334 DEBUG [io.undertow.request] (default I/O-4) Received CPING, sending CPONG
13:49:08,334 DEBUG [io.undertow.request] (default I/O-4) Matched prefix path /SECUI for path /SECUI/UI/js/bootstrap.3.3.7.js
13:49:08,335 DEBUG [io.undertow.request.security] (default task-80) Security constraints for request /SECUI/UI/js/bootstrap.3.3.7.js are [SingleConstraintMatch

]
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/js/ui-bootstrap-tpls-0.11.0.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/js/ui-bootstrap-tpls-0.11.0.js request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/js/ui-bootstrap-tpls-0.11.0.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/js/ui-bootstrap-tpls-0.11.0.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Authenticated as 1575777, roles []
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/js/ui-bootstrap-tpls-0.11.0.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:08,390 DEBUG [io.undertow.request.security] (default task-81) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/js/ui-bootstrap-tpls-0.11.0.js request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,098 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG
13:49:09,099 DEBUG [io.undertow.request] (default I/O-12) Matched prefix path /SECUI for path /SECUI/UI/img/s1.png
13:49:09,099 DEBUG [io.undertow.request.security] (default task-82) Security constraints for request /SECUI/UI/img/s1.png are [SingleConstraintMatch

]
13:49:09,124 DEBUG [io.undertow.request.security] (default task-83) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/css/bootstrap.min.css.map request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,124 DEBUG [io.undertow.request.security] (default task-83) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/css/bootstrap.min.css.map request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,124 DEBUG [io.undertow.request.security] (default task-83) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/css/bootstrap.min.css.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:09,125 DEBUG [io.undertow.request.security] (default task-83) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/css/bootstrap.min.css.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,125 DEBUG [io.undertow.request.security] (default task-83) Authenticated as 1575777, roles []
13:49:09,125 DEBUG [io.undertow.request.security] (default task-83) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/css/bootstrap.min.css.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,125 DEBUG [io.undertow.request.security] (default task-83) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/css/bootstrap.min.css.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,880 DEBUG [io.undertow.request] (default I/O-6) Received CPING, sending CPONG
13:49:09,880 DEBUG [io.undertow.request] (default I/O-6) Matched prefix path /SECUI for path /SECUI/UI/js/angular.min.js.map
13:49:09,881 DEBUG [io.undertow.request.security] (default task-84) Security constraints for request /SECUI/UI/js/angular.min.js.map are [SingleConstraintMatch

]
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/js/angular-cookies.min.js.map request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/js/angular-cookies.min.js.map request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/js/angular-cookies.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/js/angular-cookies.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Authenticated as 1575777, roles []
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/js/angular-cookies.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,898 DEBUG [io.undertow.request.security] (default task-85) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/js/angular-cookies.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,919 DEBUG [io.undertow.request] (default I/O-4) Received CPING, sending CPONG
13:49:09,919 DEBUG [io.undertow.request] (default I/O-4) Matched prefix path /SECUI for path /SECUI/UI/js/angular-route.min.js.map
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Security constraints for request /SECUI/UI/js/angular-route.min.js.map are [SingleConstraintMatch

]
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Authenticating required for request HttpServerExchange{ GET /SECUI/UI/js/angular-route.min.js.map request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Setting authentication required for exchange HttpServerExchange{ GET /SECUI/UI/js/angular-route.min.js.map request

response {X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Attempting to authenticate HttpServerExchange{ GET /SECUI/UI/js/angular-route.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}, authentication required: true
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Authentication outcome was NOT_ATTEMPTED with method io.undertow.security.impl.CachedAuthenticatedSessionMechanism@1cb334c2 for HttpServerExchange{ GET /SECUI/UI/js/angular-route.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Authenticated as 1575777, roles []
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Authentication outcome was AUTHENTICATED with method org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationMechanism@b6af5cf for HttpServerExchange{ GET /SECUI/UI/js/angular-route.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:09,920 DEBUG [io.undertow.request.security] (default task-86) Authentication result was AUTHENTICATED for HttpServerExchange{ GET /SECUI/UI/js/angular-route.min.js.map request

response {Expires=[0], Cache-Control=[no-cache, no-store, must-revalidate], X-XSS-Protection=[1], X-Content-Type-Options=[nosniff], Pragma=[no-cache], X-Frame-Options=[SAMEORIGIN]}}
13:49:12,528 DEBUG [org.picketlink.common] (Timer-2) Loading PicketLink configuration from [/WEB-INF/picketlink.xml].
13:49:12,529 INFO [org.picketlink.common] (Timer-2) Service Provider is setting the CanonicalizationMethod on XMLSignatureUtil::http://www.w3.org/2001/10/xml-exc-c14n#WithComments
13:49:16,387 DEBUG [org.jboss.modcluster] (UndertowEventHandlerAdapter - 1) MODCLUSTER000009: Sending STATUS for default-server
13:49:16,391 DEBUG [io.undertow.request] (default I/O-12) Received CPING, sending CPONG

HTTP Log:

10.128.117.63 - - [25/Mar/2020:13:58:40 +0800] "POST /SECUI/jaxrs/Authentication HTTP/1.1" 302 -

==> ssl_request_log.2020-03-25 <==
[25/Mar/2020:13:58:40 +0800] 10.128.117.63 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /SECUI/jaxrs/Authentication HTTP/1.1" -

==> ssl_access_log.2020-03-25 <==
10.128.117.63 - - [25/Mar/2020:13:58:40 +0800] "GET /SECUI/UI/index.htm HTTP/1.1" 200 7342

==> ssl_request_log.2020-03-25 <==
[25/Mar/2020:13:58:40 +0800] 10.128.117.63 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SECUI/UI/index.htm HTTP/1.1" 7342

PiketLink.xml

<PicketLink xmlns="urn:picketlink:identity-federation:config:2.1">
<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:2.1" LogOutPage="/customLogout.jsp" SupportsSignatures="true" BindingType="POST">
<IdentityURL>https://IdentyProvider.com:8443/openam/SSOPOST/metaAlias/SSO/idp4</IdentityURL>
<!-- <ServiceURL>https://serviceProvider.com:8583/SECUI/UI/index.htm</ServiceURL> -->
<ServiceURL>https://serviceProvider.com:8583/SECUI/jaxrs/Authentication</ServiceURL>

<KeyProvider ClassName="org.picketlink.identity.federation.core.impl.KeyStoreKeyManager">
<Auth Key="KeyStoreURL" Value="/jboss/eap/7.1/instances/CAT_ICM_HUB_SEC_01/MFA.jks" />
<Auth Key="KeyStorePass" Value="changeit" />
<Auth Key="SigningKeyPass" Value="changeit" />
<Auth Key="SigningKeyAlias" Value="serviceProvider.com" />
<ValidatingAlias Key="serviceProvider.com" Value="serviceProvider.com" />
<ValidatingAlias Key="IdentyProvider.com" Value="IdentyProvider.com" />
</KeyProvider>

</PicketLinkSP>
<Handlers xmlns="urn:picketlink:identity-federation:handler:config:2.1">
<Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler" />
<!-- <Handler class="org.picketlink.identity.federation.core.saml.v2.interfaces.SAML2HandlerResponse"/> -->
<!-- <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AttributeHandler "/> -->
<Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler" >
<!-- <Option Key="ASSERTION_CONSUMER_URL" Value="https://serviceProvider.com:8583/SECUI/UI/index.htm"/> -->
</Handler>
<Handler class="org.picketlink.identity.federation.web.handlers.saml2.RolesGenerationHandler" />
<Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2SignatureGenerationHandler" />
<!-- <Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2SignatureValidationHandler" /> -->

</Handlers>
</PicketLink>

Please let us know if anything wrong.

Thanks
Viswa.