SP attribute value logging

[Cantor, Scott]

On 7/13/16, 1:39 PM, "users on behalf of Cathy Scott" <users-bounces at shibboleth.net on behalf of cathystill at gmail.com> wrote:

> We run Shibboleth Service Provider and I would like to implement authentication logging to
> show the user who logs in as the actual eppn value and not just the ID.  Is there a way to
> modify the transaction log or to add additional logging to show this?

The transaction log is fairly flexible, but for privacy reasons it doesn't have the ability to actually log attribute values, just the attribute names.

It does have the ability to log REMOTE_USER, which is in some cases a sufficient workaround.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogging

-- Scott