The audit log logs released attributes, it does not log encoded ones. Adding the SAML encoding option means you're seeing what can be encoded, and that's not the same. > Any hints what to look for? And why doesn’t the resolver test trigger log entries > in ids-process.log ? It does. -- Scott