logs not matching resolver test

[IAM David Bantz]

Seeing audit log results indicating attributes released, like

{"T":"2023-03-06T…"user":”abcd","SP":"https://vpn.alaska.edu..."..."attr":"UAID,uid,domainUsername,eduPersonPrincipalName,eduPersonUniqueID","nameID”:"••••..."}


But a resolver test like the following

curl -s -k 'https://localhost:8443/idp/profile/admin/resolvertest?requester=https://vpn.alaska.edu...&principal=abcd&saml2’


does not include any attribute statement for some user/SP combinations; I
haven’t been able to grok what traits trigger this result.


Any hints what to look for? And why doesn’t the resolver test trigger log
entries in ids-process.log?


David St Pierre Bantz

U Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230306/53e4eb88/attachment.htm>