Custom Attribute in Audit Log

[Justin Andrews]

Thank you!

On Wed, May 2, 2018 at 8:49 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 5/2/18, 8:40 PM, "users on behalf of Justin Andrews" <
> users-bounces at shibboleth.net on behalf of jandrews at uwf.edu> wrote:
>
> > It mentions the value should be a
> "Function<ProfileRequestContext,Object> instance" - but quite honestly I
> don't know
> > exactly what that means.
>
>
> http://google.github.io/guava/releases/23.0/api/docs/com/google/common/base/Function.html
>
> Java interface. We have examples of scripted functions and other shorthand
> ways to provide them scattered around the wiki, and actual examples of
> functions deriving audit values in audit-system.xml
>
> >  Specifically I'd like to put the uid attribute in the audit log (which
> is different than the %u already present.)
>
> You need a Function that walks into the context tree down to the
> AttributeContext to pull out a specific IdPAttribute and then (I guess)
> assumes there's one value at most to pull out.
>
> ProfileRequestContext -> RelyingPartyContext -> AttributeContext
>
> Any of the maps of extractors that are later in the sequence
> (post-assertion, for example) would be late enough.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180503/954fe0a1/attachment.html>