Audit logging to include IP address

[Cantor, Scott]

On 11/19/15, 4:52 PM, "users on behalf of Jeffrey Eaton" <users-bounces at shibboleth.net on behalf of jeaton at cmu.edu> wrote:


>
>Further ideally, the log entry would include the IDP session identifier, so that I could tie a given password validation action to the events in the idp-audit.log for that user every time they go to a new SP, but I don't know if that information would even be available at the point in the code where the log entry would be generated.

The diagnostic logging isn't really manipulatable, that's just code. Adding the IP address is already possible with any log entries. Anything else is a code change.

The audit logging, OTOH, is totally configurable. Specific logins are not an auditable event, however, only profile runs.

-- Scott