Shib logs

[Cantor, Scott]

On 9/21/15, 5:43 PM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:
>
>The NameID is logged to the transaction log. The attribute values recived are not logged, they can contain sensitive information. If REMOTE_USER is populated, then the web server's access log will contain a username in the usual field of an NCSA format log entry.
>
>Otherwise, no.

(Most of which is documented [1].)

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogging