catch (InvalidAuthenticationException e)
{
  throw new InvalidAuthenticationException(SOAPService.INVALID_AUTHENTICATION);
}

This overwrites the message set by the directory and, as a bonus, is factually incorrect.

Workaround: use authenticatePrincipal().