obtaining more granular AWS Cognito App information in shib logs?

[Arron Merrill]

Thanks for your input Peter. Yes, the IdP has no visibility on the apps and
unfortunately the ACS URL is specific to the user pool, not the apps. I had
exhausted my (limited) knowledge of Shib and was found wanting. I feared
this might be futile, but thought best to get the opinions of others before
we start looking at other options.

We would like this specific information so that we can feed it into our
SIEM to enable us to more quickly determine which services users are
accessing. The Cognito apps remain obfuscated and we are trying to get them
in line with the rest of our integrations.

Kind regards,
Arron

-- 
Arron Merrill - Cyber Security Operations Analyst
IT Services, University of York
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240926/4b27c466/attachment.htm>