Where to define audit override beans?

[Cantor, Scott]

> I do wonder  if there's an easier way I'm not seeing (my attempt to use the 
> replacement map didn't work, but I'm not sure how to say "all spring 
> events" there anyway).

I would call that sort of a bug, it's handling the field in a special way and it isn't running through that replacement logic. If you file that we can get that part fixed, but other than applying that patch I don't have any other suggestion.

> I'd like to make a custom log entry when SSO is performed (real Shib
> IdP SSO, not my legacy SSO from authn/External - the built-in
> authentication audit logging works fine for that case).

That was definitely not a supported feature. I guess it could be, but I don't really see the point, as you get that indication in the "primary" audit log already. SSO is not authentication from the IdP's perspective.

The login auditing was intended to act as a stand-in for not having adequate logging on the back-end or access to the right information to log, but there is no back-end in that case, the normal logging was expected to be sufficient for that.

-- Scott