Logging the value of the id attribute of the <saml2p:Response> element

[Wessel, Keith]

Thanks, Scott. I was looking at the logback config docs, not the audit logging docs. I appreciate you steering me in the right direction.

So, I assume that %msg is preconfigured for several of these tokens for the audit log entries. Is it best practice to just add to that, or is it recommended that we rebuild what currently comes out of %msg from these tokens?

Thanks,
Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Monday, June 15, 2020 7:23 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Logging the value of the id attribute of the <saml2p:Response> element

https://wiki.shibboleth.net/confluence/display/IDP4/AuditLoggingConfiguration

Lower case "I" is the assertion ID.

Capital "I" is the inbound message ID.

Two capitals ("II") is the InResponseTo value.

Three capitals ("III") is the outbound message ID.

-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net