Sending the SAMLReply/Assertion

[Peter Schober]

* Jan Vilhuber <JVilhuber at absolute.com> [2021-07-02 04:05]:
> I’m trying to figure out how I can gather usage metrics from
> shibboleth SP

The transaction log should cover "usage metrics" use cases just fine
(always provided you do the parsing and convertion into time series
data yourself).

>   1.  Process signature debug logs and turn them into metrics (then discarding them, as they contain sensitive information), or
>   2.  Sending the SAMLReply or Assertion to some endpoint when it is received (after processing and validation), so some other service can turn it into metrics.
> Is there some way I can send the raw reply or at least the Assertion to an API? Or perhaps turn the whole thing into an HTTP header and forward it along with the attributes it normally sends?

Why would you need signature debug logs (and why would there be
sensitive information in them?) or raw assertions for "usage metrics"?

-peter