Logging attribute values

[Paul Hethmon]

The IdP can log the values in two ways. The first is simply at the
resolution level as it resolves the attributes to release. The second is
in the actual SAML response message. Both require that you up the
appropriate logging level in the logging.xml configuration file.

Neither is suitable (at least easily) for any kind of automated processing.

Paul

-- 


Paul Hethmon
Chief Software Architect
Clareity Security, LLC
o) 865.824.1350
c) 865.250.3517
e) paul.hethmon at clareitysecurity.com






On 10/7/11 1:36 PM, "Rob Chevalier" <robc at uoregon.edu> wrote:

>For diagnostic purposes, it would be useful if the  IdP/SP could log the
>attribute values is sends/receives.
>
>After searching the list archives, it appears to me that the SP cannot
>be configured to log the attribute values it receives but I have not
>been able to make this same determination for the IdP.   Can the IdP be
>configured to log the attribute values it sendings to an SP?
>
>If this has already been answered before, I apologize for asking the
>question again.
>
>Cheers,
>
>Rob Chevalier
>
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net