Log SOAP Binding Credential

[Marvin Addison]

I'm getting an error that I'd like to troubleshoot:

14:16:15.952 ERROR
[org.opensaml.ws.security.provider.MandatoryAuthenticatedMessageRule:37]
- Inbound message issuer was not authenticated.
14:16:15.952 WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.AttributeQueryProfileHandler:180]
- Message did not meet security requirements
org.opensaml.ws.security.SecurityPolicyException: Inbound message
issuer was not authenticated.

The message is a SOAP binding message that is clearly logged, so it's
getting past the container trust manager. I would think the next step
is to confirm the certificate matches what's expected in the metadata.
Is there a logger I can turn up to log the PEM-encoded certificate
that the container provides to the IdP when terminating a SOAP binding
request?

Thanks,
M