Hi All,

We have a requirement to audit SAML requests in logs (say request.log or some custom log), where we need to show one of the SAML assertion value in the logs for every request.

Can you please let me know if there there any OOTB or custom way to achieve this?

Example, if below is the assertion value,

   <saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
   <saml:AttributeValue xsi:type="xs:string">test@example.com</saml:AttributeValue>
   </saml:Attribute>

We need to log test@example.com in every request log.