Shibboleth Developers

["Scott Cantor" <>]

> Agreed for the attribute values, that is problematic.
> But I think there is value (beyond mere debug logging) for at least
> logging on an SP info about the Shib user sessions:
>  - when a session (with some unique session ID) starts (which IdP
>    provided which handle)
>  - when an attribute request takes place (which attributes 
> (if any) get
>    requested from which AA)
>  - when an attribute assertion is received (which attributes 
> get received
>    from which AA)
>  - when a session ends (not applicable as long there is no logout
>    implemented)

Ok, but all of that is in 1.2 except for logging the attribute names...

If there's something incomplete about the session tracking in the
transaction log, you'll have to tell me what it is.

-- Scott