<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:Menlo;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">David,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">If you mean having </span>
<span style="font-size:12.0pt;font-family:"Segoe UI",sans-serif;color:#172B4D;letter-spacing:-.05pt">%attr in the shibboleth.AuditFormattingMap in audit.xml that is already set.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Segoe UI",sans-serif;color:#172B4D;letter-spacing:-.05pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Segoe UI",sans-serif;color:#172B4D;letter-spacing:-.05pt">Neil</span><span style="mso-fareast-language:EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> IAM David Bantz <dabantz@alaska.edu>
<br>
<b>Sent:</b> 18 August 2022 18:07<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> McLennan, Neil R <n.mclennan@imperial.ac.uk>; Kevin Foote <kevin.foote@colorado.edu><br>
<b>Subject:</b> RE: CAS logging<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Looks like your audit log contains the CAS service ticket; you likely need to adjust the audit log configuration to include released attributes;<o:p></o:p></p>
</div>
<div>
<p style="margin:0cm;font-stretch:normal"><span style="font-size:8.5pt;font-family:"Menlo",serif">...conf/audit.xml <o:p></o:p></span></p>
<p style="margin:0cm;font-stretch:normal"><span style="font-size:8.5pt;font-family:"Menlo",serif"><br>
<br>
<o:p></o:p></span></p>
<p style="margin:0cm;font-stretch:normal"><span style="font-size:8.5pt;font-family:"Menlo",serif">the idp-process.log can also be configured to provide enormous detail on construction and filtering of attributes….<o:p></o:p></span></p>
<p style="margin:0cm;font-stretch:normal"><span style="font-size:8.5pt;font-family:"Menlo",serif"><o:p> </o:p></span></p>
<p style="margin:0cm;font-stretch:normal"><span style="font-size:8.5pt;font-family:"Menlo",serif"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On 18Aug2022 at 08:13:23, "McLennan, Neil R via users" <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal">Kevin,<br>
<br>
attribute-filter.xml file is identical on both servers, so are all the files in config/attributes. The idp_audit.log is not very helpful as shown below.<br>
<br>
2022-08-18T16:01:54.456635200Z|146.179.32.222|||<a href="https://www.imperial.ac.uk/monitoring/cas/attributes-json/|https:/www.apereo.org/cas/protocol/login||||nmhl|||nmhl|ST-AADXGZLDOJSXIMJDLXUYXEXYWYSOETE22WTNR6L7LAZA3EUUZAGEB2DV3CZCJSBJKRY7OSLMAYVZHO2A3LZWXQWC3GP5XRG37UZG36PMSX7NQTDAGCNNO66KD5C4LXWHUG4TMQCUEBLWKORTWK5H7YWBFNZNIXTHYTYUJA52DNJZSUX77EV4FSWOBTZP2RHO3T34FM5FE4EQJ7XEK7BBK733I3PFHIKDBVGROYJLIC3KPYYNA45ONIHQTEMYPVWCKMZ32DQYDI2XRBLTWMA4RZ7VVWNM6OSDHLCGGTMKETFBAMFC7EFSGV6TAYVH3ZY75H76XBC7WYHXDB6XCSD4FNWZC6DK5XGGZA3HTUVCCGHA3SDXGI26ECLNGBQW6KXZYVBW323HHGO5MONCQTIE3NQ54QMYS---||Mozilla/5.0">https://www.imperial.ac.uk/monitoring/cas/attributes-json/|https://www.apereo.org/cas/protocol/login||||nmhl|||nmhl|ST-AADXGZLDOJSXIMJDLXUYXEXYWYSOETE22WTNR6L7LAZA3EUUZAGEB2DV3CZCJSBJKRY7OSLMAYVZHO2A3LZWXQWC3GP5XRG37UZG36PMSX7NQTDAGCNNO66KD5C4LXWHUG4TMQCUEBLWKORTWK5H7YWBFNZNIXTHYTYUJA52DNJZSUX77EV4FSWOBTZP2RHO3T34FM5FE4EQJ7XEK7BBK733I3PFHIKDBVGROYJLIC3KPYYNA45ONIHQTEMYPVWCKMZ32DQYDI2XRBLTWMA4RZ7VVWNM6OSDHLCGGTMKETFBAMFC7EFSGV6TAYVH3ZY75H76XBC7WYHXDB6XCSD4FNWZC6DK5XGGZA3HTUVCCGHA3SDXGI26ECLNGBQW6KXZYVBW323HHGO5MONCQTIE3NQ54QMYS---||Mozilla/5.0</a>
(Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0|||nmhl||||||||||<br>
<br>
Neil<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
</div>
</body>
</html>