How to terminate MFA flow with an error?

[Cantor, Scott]

On 1/8/19, 12:43 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> Any thoughts about whether one of these events should go in the audit log? 
> That is a setting in errors.xml.  I end with an "empty" audit log entry, 
> like this:

You can add event IDs to the log, but they often don't show up, it's complex at times to keep them visible long enough for logging. I don't know if will show up or not.

> The defaults in errors.xml log for ContextCheckDenied, 
> AttributeReleaseRejected, and TermsRejected.  It does not log for 
> RuntimeException.  Is there a reason for those choices?

Not really. All logging and error handling should be reviewed and adjusted by any deployer.

-- Scott