Logging the value of the id attribute of the <saml2p:Response> element

Wessel, Keith kwessel at illinois.edu
Mon Jun 15 14:38:39 UTC 2020

Thanks, Scott. I was looking at the logback config docs, not the audit logging docs. I appreciate you steering me in the right direction.

So, I assume that %msg is preconfigured for several of these tokens for the audit log entries. Is it best practice to just add to that, or is it recommended that we rebuild what currently comes out of %msg from these tokens?


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Monday, June 15, 2020 7:23 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Logging the value of the id attribute of the <saml2p:Response> element


Lower case "I" is the assertion ID.

Capital "I" is the inbound message ID.

Two capitals ("II") is the InResponseTo value.

Three capitals ("III") is the outbound message ID.

-- Scott

For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

More information about the users mailing list