<div dir="ltr">Thank you!</div><br><div class="gmail_quote"><div dir="ltr">On Wed, May 2, 2018 at 8:49 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 5/2/18, 8:40 PM, "users on behalf of Justin Andrews" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:jandrews@uwf.edu" target="_blank">jandrews@uwf.edu</a>> wrote:<br>
<br>
> It mentions the value should be a "Function<ProfileRequestContext,Object> instance" - but quite honestly I don't know<br>
> exactly what that means.<br>
<br>
<a href="http://google.github.io/guava/releases/23.0/api/docs/com/google/common/base/Function.html" rel="noreferrer" target="_blank">http://google.github.io/guava/releases/23.0/api/docs/com/google/common/base/Function.html</a><br>
<br>
Java interface. We have examples of scripted functions and other shorthand ways to provide them scattered around the wiki, and actual examples of functions deriving audit values in audit-system.xml<br>
<br>
> Specifically I'd like to put the uid attribute in the audit log (which is different than the %u already present.)<br>
<br>
You need a Function that walks into the context tree down to the AttributeContext to pull out a specific IdPAttribute and then (I guess) assumes there's one value at most to pull out.<br>
<br>
ProfileRequestContext -> RelyingPartyContext -> AttributeContext<br>
<br>
Any of the maps of extractors that are later in the sequence (post-assertion, for example) would be late enough.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>