Consent Logging

[Cantor, Scott]

> It looks as though the plumbing explained by Tom is in place. However I'm
> not sure if that means it is supposed to work or if I'm supposed to change
> something to have it actually logged. Does logback need to be updated to
> "Make it so"?

No, the audit logging is generally something you configure inside the IdP because it has to know about the details of what's being logged, logback just sets up where the output goes.

I haven't looked at the flow, I don't know if it's writing out the consent audit log entry in every case. That was a bitch to get working for the regular audit log, so there's probably just an escape route it's getting out without doing it.

-- Scott