Logging of requested authnContext

Christopher Bongaarts cab at umn.edu
Wed Oct 2 12:58:23 EDT 2013


On 10/2/2013 11:47 AM, Cantor, Scott wrote:
> On 10/2/13 11:57 AM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>> Is there an easy way on the IdP to include logging of the
>> requestedAuthnContext in an authenRequest from an SP?  Logging of the
>> actual authnContext issued is already there in the idp-audit log, so we
>> can see which SPs received a particular value.  To see which SPs
>> actually asked for a value, is it simply a matter of configuration, or
>> do we need to write some code?
> There isn't really any logging of the request side of things right now.
> You'd have to hack on the profile handlers or base classes to add anything.

Thanks.   I can get at the value from our custom LoginHander, so I can 
probably sneak some code in there to log that (in fact we're probably 
already logging it at debug...)

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%



More information about the users mailing list