Logging of requested authnContext
Christopher Bongaarts
cab at umn.edu
Wed Oct 2 12:58:23 EDT 2013
On 10/2/2013 11:47 AM, Cantor, Scott wrote:
> On 10/2/13 11:57 AM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>> Is there an easy way on the IdP to include logging of the
>> requestedAuthnContext in an authenRequest from an SP? Logging of the
>> actual authnContext issued is already there in the idp-audit log, so we
>> can see which SPs received a particular value. To see which SPs
>> actually asked for a value, is it simply a matter of configuration, or
>> do we need to write some code?
> There isn't really any logging of the request side of things right now.
> You'd have to hack on the profile handlers or base classes to add anything.
Thanks. I can get at the value from our custom LoginHander, so I can
probably sneak some code in there to log that (in fact we're probably
already logging it at debug...)
--
%% Christopher A. Bongaarts %% cab at umn.edu %%
%% OIT - Identity Management %% http://umn.edu/~cab %%
%% University of Minnesota %% +1 (612) 625-1809 %%
More information about the users
mailing list