checking IdP's outbound SAML assertion

[David Bantz]

I'd like to verify the attribute values in the SAML assertion sent to a newly integrated service.  We've set the logging level to DEBUG; the tail of the logs for a transaction indicates the correct attribute names we are intending to release (surname,givenName,bannerid,BBConnectFedID), but not the values of those attributes.

This transaction does enable authentication to the service; but how can I confirm I'm sending the values I think I am (apart from the obvious 'ask the service owner to look' which I'm not doing for good reasons I won't bore you with)?

13:37:48.910 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:777] - Encoding response to SAML request _f74cd8c8502d780a371db5143bec2e8a from relying party https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25
13:37:48.911 - DEBUG [org.opensaml.ws.message.encoder.BaseMessageEncoder:48] - Beginning encode message to outbound transport of type: org.opensaml.ws.transport.http.HttpServletResponseAdapter
13:37:48.911 - DEBUG [org.opensaml.saml2.binding.encoding.HTTPPostEncoder:123] - Invoking Velocity template to create POST body
13:37:48.911 - DEBUG [org.opensaml.saml2.binding.encoding.HTTPPostEncoder:157] - Encoding action url of 'https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25' with encoded value 'https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25'
13:37:48.912 - DEBUG [org.opensaml.saml2.binding.encoding.HTTPPostEncoder:160] - Marshalling and Base64 encoding SAML message
13:37:48.912 - DEBUG [org.opensaml.ws.message.encoder.BaseMessageEncoder:96] - Marshalling message
13:37:48.918 - DEBUG [PROTOCOL_MESSAGE:73] - 
13:37:48.918 - DEBUG [org.opensaml.ws.message.encoder.BaseMessageEncoder:55] - Successfully encoded message.
13:37:48.919 - INFO [Shibboleth-Audit:969] - 20120920T213748Z|urn:mace:shibboleth:2.0:profiles:AuthnRequest|_f74cd8c8502d780a371db5143bec2e8a|https://sso.blackboardconnect.com/SAML/Portal/E0D069C2563D4D63A14CBB95D6845C25|urn:mace:shibboleth:2.0:profiles:saml2:sso|urn:mace:incommon:alaska.edu|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_e675ddcf193cba133822f495381da493|anautiyal|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|surname,givenName,bannerid,BBConnectFedID,||_18bcc3038154ac4b47c0e201a324d983,|
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120920/a43c48ca/attachment-0001.html