PicketLinkAudit

Availability

Available since PicketLink v2.1.2.Final (Release Date: TBD)

JIRA

https://issues.jboss.org/browse/PLFED-305

Configuration

At the root element of picketlink.xml ie. PicketLink,  please add the attribute "EnableAudit" and set it to "true".

Server Runtime Configuration

JBoss AS 7.1.x

Please make the following configuration changes to the logging section of standalone.xml

As you can see, we have added a rotating file handler called "PICKETLINK" and then we have defined the logger at info for the PicketLinkAuditProvider.

Now for each of the security domains that govern your Identity Provider, Service Provider and Security Token Server (STS), add the audit provider.

During Operation, you should see a picketlink.log file in your server log directory.

Here is an example of picketlink.log that was generated for enabling the audit on the IDP application alone.

Enabling global audit setting

For JBoss AS 7.1.x, you can configure the system property in standalone.xml