<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Is there a straightforward way to include the unencrypted incoming and outgoing SAML assertion in logs?<div><div><br></div><div>The <span style="background-color: rgb(255, 250, 194); font-family: Monaco; font-size: 10px;">edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler </span>logger</div><div><font face="Monaco" size="1">includes the unencrypted SAML assertion just prior to encryption and I’ve used that output</font></div><div><font face="Monaco" size="1">many times to document to Service Providers what I sent them, or in responding to claims </font></div><div><font face="Monaco" size="1">from end users and end user support concerning the attributes sent. But </font></div><div><font face="Monaco" size="1">1) I have a small </font><span style="font-family: Monaco; font-size: x-small;">number of SPs that cannot consume encrypted assertions; the assertion </span></div><div><span style="font-family: Monaco; font-size: x-small;">isn’t added to the logs by that logger in those cases, and</span></div><div><span style="font-family: Monaco; font-size: x-small;">2) that logger understandably does not include the incoming authN request.</span></div><div><span style="font-family: Monaco; font-size: x-small;"><br></span></div><div><span style="font-family: Monaco; font-size: x-small;">The </span><span style="background-color: rgb(255, 250, 194);"><font face="Monaco" size="1">PROTOCOL_MESSAGE logger includes both the incoming request and the outgoing SAML assertion, </font></span></div><div><span style="background-color: rgb(255, 250, 194);"><font face="Monaco" size="1">and it’s human-readable </font></span><span style="font-family: Monaco; font-size: x-small; background-color: rgb(255, 250, 194);">if unencrypted, but turning that on creates massive output, usually </span></div><div><span style="font-family: Monaco; font-size: x-small; background-color: rgb(255, 250, 194);">not human-readable </span><span style="font-family: Monaco; font-size: x-small; background-color: rgb(255, 250, 194);">(encrypted).</span></div><div><span style="background-color: rgb(255, 250, 194);"><font face="Monaco" size="1"><br></font></span></div><div>Thanks for your suggestions,</div></div><div><br></div><div>David Bantz</div></body></html>