DS-1085 reports and fixes that the column last_active in the table eperson is never written. Using the JSPUI and authentication either by password or using shibboleth the last_active column is updated, but this update is not pushed into the database, as neither context.commit() nor context.complete() is called.
It may be a little bit odd to call context.commit() in the JSPUI Servlet that handles the login, as the servlet does not change the database. But I think it is better to commit the context there then to commit it in the AuthenticationManager that belongs to dspace-api. Commiting a context in the AuthenticationManager could have bad side effects.
Providing a fix should be easy, nevertheless I don't have the time right now. I probably will have the time by end of June if no one is faster...
I did not checked the XMLUI but I would expect the same problem there.