SimpleAttributePredicate case insensitive

[Cantor, Scott]

> Is there a new recommended format string for audit logging?  I'm using the
> v3.3 default:

I have no particular recommendation, it's just whatever you want/need for your particular situation. If you have a question about what any of the documented fields mean, just ask. The one you're talking about here is %e

The V3 default is the V2 default, it's there to avoid breaking people with log parsers. The V2 log was incapable of logging anything but successful outcomes, so it has no ability to communicate much of anything that's not success.

Mine is "%u|%SP|%i|%ac|%t|%attr|%n|%f|%b|%bb|%e|%S|%SS|%s|%UA|%a" but I also have a lot of other customizations in place using various beans in audit.xml like the replacement map. I turn all the ugly SAML constants into local strings (e.g. Success, password, password+duo).

-- Scott