Custom Attribute in Audit Log

[Cantor, Scott]

On 5/2/18, 8:40 PM, "users on behalf of Justin Andrews" <users-bounces at shibboleth.net on behalf of jandrews at uwf.edu> wrote:

> It mentions the value should be a "Function<ProfileRequestContext,Object> instance" - but quite honestly I don't know
> exactly what that means.

http://google.github.io/guava/releases/23.0/api/docs/com/google/common/base/Function.html

Java interface. We have examples of scripted functions and other shorthand ways to provide them scattered around the wiki, and actual examples of functions deriving audit values in audit-system.xml

>  Specifically I'd like to put the uid attribute in the audit log (which is different than the %u already present.)

You need a Function that walks into the context tree down to the AttributeContext to pull out a specific IdPAttribute and then (I guess) assumes there's one value at most to pull out.

ProfileRequestContext -> RelyingPartyContext -> AttributeContext

Any of the maps of extractors that are later in the sequence (post-assertion, for example) would be late enough.

-- Scott