<html><body><div dir="ltr">Seeing audit log results indicating attributes released, like<div><pre class="c-mrkdwn__pre" style="box-sizing:inherit;margin-top:4px;margin-bottom:4px;padding:8px;font-variant-ligatures:none;line-height:1.50001;word-break:normal;background:rgba(var(--sk_foreground_min,29,28,29),0.04);border:1px solid var(--saf-0);border-radius:4px;overflow-y:hidden;color:rgb(29,28,29);font-family:Monaco,Menlo,Consolas,"Courier New",monospace!important"><span style="font-size:12px">{"T":"2023-03-06T…"user":”abcd","SP":"<a href="https://vpn.alaska.edu">https://vpn.alaska.edu</a>..."..."attr":"UAID,uid,domainUsername,eduPersonPrincipalName,eduPersonUniqueID","nameID”:"••••..."}</span></pre></div><div><span style="font-size:13px"> </span></div><div dir="ltr"><span style="font-size:13px">But a resolver test like the following</span></div><div dir="ltr"><pre style="border:1px solid rgb(206,206,206);background-color:rgb(244,244,244);padding:10px;border-radius:2px;margin-top:0px;margin-bottom:0px"><span style="font-size:13px">curl -s -k '<a href="https://localhost:8443/idp/profile/admin/resolvertest?requester=https://vpn.alaska.edu...&principal=abcd&saml2">https://localhost:8443/idp/profile/admin/resolvertest?requester=https://vpn.alaska.edu...&principal=abcd&saml2</a>’</span></pre></div><div dir="ltr"><p style="margin:0px;font-stretch:normal;line-height:normal;font-family:Menlo"><span style="font-variant-ligatures:no-common-ligatures;font-size:13px"><br></span></p><p style="margin:0px;font-stretch:normal;line-height:normal" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures"><font face="ui-sans-serif, sans-serif">does not include any attribute statement for some user/SP combinations; I haven’t been able to grok what traits trigger this result.</font></span></p><p style="margin:0px;font-stretch:normal;line-height:normal" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;font-size:13px"><font face="ui-sans-serif, sans-serif"><br></font></span></p><p style="margin:0px;font-stretch:normal;line-height:normal" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;font-size:13px"><font face="ui-sans-serif, sans-serif">Any hints what to look for? And why doesn’t the resolver test trigger log entries in ids-process.log</font><font face="Menlo">?</font></span></p><p style="margin:0px;font-stretch:normal;line-height:normal" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;font-size:13px"><font face="Menlo"><br></font></span></p><p style="margin:0px;font-stretch:normal;line-height:normal" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;font-size:13px"><font face="ui-sans-serif, sans-serif">David St Pierre Bantz</font></span></p><p style="margin:0px;font-stretch:normal;line-height:normal" dir="ltr"><span style="font-variant-ligatures:no-common-ligatures;font-size:13px"><font face="ui-sans-serif, sans-serif">U Alaska</font></span></p></div></div></body></html>