log when sp does not have allowAll set, log when idp does have allow all set