Phase Events Performance Summary

7-8 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

7.1.2.4.2 Protocol Profiles

Table 7–4 shows the protocol profile metrics collected by phase event sensors for requests and responses: LocateActiveIdentityProviderFede ration Active IdP Federation Retrieval Time ms Time taken to locate the active Identity Provider federation. heavy LocateProviderFederation Provider Federation Retrieval Time ms Time taken to locate the Provider federation. heavy LocateTemporaryProviderFederat ion Temporary Provider Federation Retrieval Time ms Time taken to locate the active Temporary Provider federation heavy CreateAffiliationProviderFederati on Affiliation Federation Creation Time ms Time taken to create the Affiliation Provider federation. heavy LocateAffiliationFederation Affiliation Federation Retrieval Time ms Time taken to locate the Affiliation federation heavy CreateServiceProviderFederation SP Federation Creation Time ms Time taken to create the service provider federation heavy CreateIdentityProviderFederation IdP Federation Creation Time ms Time taken to create the Identity Provider federation. heavy DeleteSession Session Deletion Time ms Time taken to delete the session. heavy CreateBinaryLargeObject Database BLOB Creation Time ms Time taken to create the Blob. heavy LocateBinaryLargeObject Database BLOB Retrieval Time ms Time taken to locate the Blob. heavy SessionPersistence Time to Persist Session Data ms Time taken to persist the session. heavy DeleteArtifact SAML Artifact Deletion Time ms Time taken to delete the artifact heavy DeleteProfileState ProfileState Data Deletion Time ms Time taken to delete the Profile State. heavy DeleteActiveIdPFederation Active IdP Federation Deletion Time ms Time taken to delete the active IdP federation. heavy DeleteActiveSPFederation Active SP Federation Deletion Time ms Time taken to delete the active SP federation. heavy DeleteProviderFederation Provider Federation Deletion Time ms Time taken to delete the provider federation. heavy ProviderFederationPersistence Time to Persist a Provider Federationms Time taken to persist the provider federation. heavy Table 7–3 Cont. JVTDiscoveryProvider Events Name Label and Description Weight Diagnostics and Auditing 7-9

7.1.2.4.3 Security Processing

Table 7–5 shows the metrics collected during security processing by phase event sensors: Note: In the table, the Label and Description refers to the short label attached to the metric in Fusion Middleware Control, followed by a description of the metric. Table 7–4 Protocol Profile Events Name Label and Description Weight LocalAuthn Local User Authentication Time ms Time taken by the user to get authenticated locally at IdPSP. normal AuthnRequestProcessing AuthnRequest Processing time at the IdP ms Time taken to process AuthnRequest at IdP. heavy AuthnResponseProcessing AuthnResponse Processing Time at SP ms Time taken to process AuthnResponse at SP. normal ArtifactProcessing SAML Artifact Processing Time ms Time taken to process Artifact. heavy Logout Global Logout Time ms Time taken for global logout. heavy RequestProcessing Incoming Request Processing Time ms Time taken by ApplicationController to process request. normal EventProcessing Event Processing Time ms Time taken by ActionStateMachine to process event. heavy Note: In the table, the Label and Description refers to the short label attached to the metric in Fusion Middleware Control, followed by a description of the metric. Table 7–5 Security Processing for Phase Events Name Label and Description Weight XMLSigner XML Message Signing Time ms Time taken by XMLSigner to sign message. heavy XMLSignatureVerifier XML Message Signature Verification Time ms Time taken by XMLSignatureVerifier to verify the message signature. heavy QueryStringSigner URL Query String Signing Time ms Time taken to sign the Query string. heavy QueryStringSignatureVerifier URL Query String Signature Verification Time ms Time taken to verify the signature for Query string. heavy 7-10 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

7.2 Availability

Oracle Identity Federation is a Java component whose availability is tracked through Fusion Middleware Control. For details, see Getting Started Using Oracle Enterprise Manager Fusion Middleware Control in the Oracle Fusion Middleware Administrators Guide.

7.3 Logging

This section describes logging for Oracle Identity Federation: ■ About Oracle Identity Federation Logging ■ Viewing Oracle Identity Federation Log Messages ■ Configuring Oracle Identity Federation Logs ■ Common Log Messages For more information about logging in Oracle Fusion Middleware, see Managing Log Files and Diagnostic Data in the Oracle Fusion Middleware Administrators Guide.

7.3.1 About Oracle Identity Federation Logging

This section provides a basic overview of logging for Oracle Identity Federation. Topics include: ■ Types of Logs ■ Log Levels ■ Message IDs ■ Tools for Log Configuration

7.3.1.1 Types of Logs

Oracle Identity Federation provides two types of logs: ■ Persistent Logs - These logs persist across component restarts. ■ Runtime Logs - These logs are created automatically by the server at runtime and become active when a specific feature is activated. The persistent log files include: XMLEncryptionService XML Message Encryption Time ms Time taken to encrypt the message. heavy XMLDecryptionService XML Message Decryption Time ms Time taken to decrypt the message. heavy SerializeMessage XML Message Marshalling Time ms Time taken by LibertyProtocolMarshaller to serialize the message. heavy DeSerializeMessage XML Message Unmarshalling Time ms Time taken by the LibertyProtocolMarshaller to deserialize the message. heavy Table 7–5 Cont. Security Processing for Phase Events Name Label and Description Weight Diagnostics and Auditing 7-11 ■ servername -diagnostic.log - Contains general application log messages, debug messages, and error messages. This log is also referred to as the federation log. ■ Other log files that may contain logging messages pertaining to Oracle Identity Federation are servername.log and servername.out.

7.3.1.2 Log Levels

Table 7–6 shows the log levels of Oracle Identity Federation log messages:

7.3.1.3 Message IDs

Oracle Identity Federation log messages fall into these categories:

7.3.1.4 Tools for Log Configuration

Oracle Identity Federation provides two tools for log configuration and management: ■ Fusion Middleware Control for GUI-based configuration ■ wlst for command-line configuration

7.3.2 Viewing Oracle Identity Federation Log Messages

Log in to Fusion Middleware Control and navigate to Oracle Identity Federation instance. In the Oracle Identity Federation drop down menu, select Logs, then View Log Messages . Table 7–6 Oracle Identity Federation Log levels Log Level description INTERNAL ERROR Events that represent unrecoverable errors. ERROR Events that represent recoverable and unrecoverable errors. WARNING Events that represent failures in processing external and implicit Oracle Identity Federation server actions. NOTIFICATION High Level Oracle Identity Federation operational events describing a flow. TRACE Events with detailed processing flows and state information. Table 7–7 Oracle Identity Federation Message Categories Message ID Range Message Category FED-10000 to FED-10099 Compliance FED-10100 to FED-10999 Configuration FED-11000 to FED-11699 Data FED-11700 to FED-11999 Network FED-12000 to FED-12999 Other FED-13000 to FED-14999 Programmatic FED-15000 to FED-17999 Requests and Responses FED-18000 to FED-19999 Security FED-20000 to FED-20099 Threads 7-12 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

7.3.2.1 Select Messages to View

Take these steps to select messages to view:

1. From the Oracle Identity Federation menu, select Logs, then View Log Messages.

The Log Messages page appears.

2. Select the date range for the logs you want to view. You can select most recent, by

minutes, hours or days. Alternatively, you can select a time interval and specify the date and time to start and end.

3. Select the message types you want to view.

4. Specify any additional conditions such as display only messages that contain

some string.

5. To perform a specific search, choose Add Fields and add fields on which to

search. For each field, select a criterion from the list, then enter text into the box. Choose the red X to delete a field. Choose Add Fields to add additional fields. When you have finished adding criteria, click Search.

7.3.2.2 Specify View Options

In addition to specifying messages to view, several other viewing options are available: ■ Use the Broaden Target Scope list to view messages for the domain. ■ Choose Export Messages to File to export the log messages to a file as XML, text, or comma-separated list. ■ Click Target Log Files to view information about individual log files. ■ You can indicate when to refresh the view. Select Manual Refresh, 30-Second Refresh, or One Minute Refresh from the list on the upper right. ■ Use the View list to change the columns listed or to reorder columns. ■ Use the Show list to change the grouping of messages. ■ Collapse the Search label to view only the list of log messages. ■ To view the contents of a log file, double-click the file name in the Log File column. The View Log File: filename page is displayed. You can use the up and down arrows in the Time, Message Type, and Message ID columns to reorder the records in the file.

7.3.3 Configuring Oracle Identity Federation Logs

Use these pages to view and configure Oracle Identity Federation server logs. Take these steps to navigate to the log configuration page: 1. Log in to Fusion Middleware Control and navigate to the Oracle Identity Federation instance.

2. In the Oracle Identity Federation drop-down menu, select Logs, then Log

Configuration . Topics include: ■ Configure Oracle Identity Federation Log Levels ■ Configure Oracle Identity Federation Log Files