<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 6/7/16 5:43 AM, SAMUELE RILLI wrote:<br>
</div>
<blockquote
cite="mid:CAB7s=T1uavmROZy8Ab6xNY9JLA419mkmwOQjP3WpmFpKQ_3vww@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>I've configured a Shibboleth SP and a IdP to communicate
together.</div>
<div>When the SP sends an authentication request to the IdP
through the HTTP Redirect binding, I need the IdP to log the
whole http message which includes both the SAML authnRequest
and the SP detached signature in the Signature parameter.</div>
<div><br>
</div>
</div>
</blockquote>
<br>
You can't log them in one single log message. As others have
pointed out, you can do that with servlet container logging of the
request itself.<br>
<br>
However, you can log the decoded SAML protocol message and
separately log the query string that was received. The latter is
via the handler that evals the Redirect binding signature. <br>
<br>
<br>
<blockquote
cite="mid:CAB7s=T1uavmROZy8Ab6xNY9JLA419mkmwOQjP3WpmFpKQ_3vww@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Is it possible? Do I need to add further logger(s) to the
logback.xml?</div>
</div>
</blockquote>
<br>
I'll assume you're asking about v3 IdP here.<br>
<br>
Log these 2 categories on level DEBUG:<br>
<br>
PROTOCOL_MESSAGE<br>
org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler<br>
<br>
<br>
For the second, you should see a line beginning with "Constructing
signed content string from URL query string ...".<br>
<br>
For that, you could also be less specific and get more logging, by
configuring to log org.opensaml.saml.saml2.binding.security.impl or
org.opensaml.saml.saml2.binding.security, etc. As you like.<br>
</body>
</html>