Decoding encrypted attributes from an IDP

[Cantor, Scott]

> Thanks for getting back to me.  The saml prefix is indeed defined based on
> the smal2 namespace.  Also, I did see in the logs what looks like the
> encrypted attributes getting unpacked:

Please turn off all that. There's a reason those XMLObject categories are hardwired at INFO. The logs that matter are from the extraction.

There are numerous messages that any decryption will log as well, on DEBUG anyway.

> I don't see any actual errors anywhere, but I do know from looking at the
> transaction log that none of the encrypted data is being used for anything
> (the transaction log shows no activity).  Do I have to do something on the
> Attribute definitions (in my extractor) to tell them to decrypt attributes, or
> does that happen automagically?

Automatic. Then they have to be mapped like anything else.

-- Scott