Log Claims in Audit Logs¶
This feature enables to specify the required claims to be logged in audit logs.
Follow the steps given below in order to configure this feature.
Make the following changes in the deployment.toml
file in <IS_HOME>/repository/conf/
to enable the audit logger.
-
Add the following configuration to the
deployment.toml
file.[event.default_listener.user_claim_audit_logger] priority = 9 enable = true
-
Add the following entry to define the claims that should be logged into the audit log.
[audit.log.loggable_user_claim] claim1 = "http://wso2.org/claims/identity/accountLocked" claim2 = "http://wso2.org/claims/role"
Note
In the above configuration, you can define any claim available in the
<http://wso2.org/claims>
dialect as aLoggableUserClaim
. The accountLocked and role claims have been used here only as examples. -
Add the following configuration to the
deployment.toml
file to configure the"LogUpdatedClaimsOnly"
property.
[event.default_listener.user_claim_audit_logger]
priority = 9
enable = true
LogUpdatedClaimsOnly = true
On making the above-mentioned changes, claims will be logged into the audit.log
file in <IS_HOME>/repository/log
.