About SAML Debug Scopes and Attributes Enabling Debugging Using the Command Line

Configuring Single Sign-On with Web Browsers and HTTP Clients 7-21 Identity Provider site and Force Authentication is enabled, the user is not forced to authenticate again at the Identity Provider site.

7.4 Enabling Debugging for SAML 1.1 and 2.0

You can enable debugging for a web application that uses SAML for SSO by setting the desired ServerDebug configuration attributes to true. WebLogic Server provides a variety of ways to do this, as explained in the following sections: ■ Section 7.4.1, About SAML Debug Scopes and Attributes ■ Section 7.4.2, Enabling Debugging Using the Command Line ■ Section 7.4.3, Enabling Debugging Using the WebLogic Server Administration Console ■ Section 7.4.4, Enabling Debugging Using the WebLogic Scripting Tool ■ Section 7.4.5, Sending Debug Messages to Standard Out

7.4.1 About SAML Debug Scopes and Attributes

Table 7–2 and Table 7–3 list and describe the registered debug scopes and attributes provided in WebLogic Server for SAML 1.1 and 2.0. Table 7–2 SAML 1.1 Debug Scopes and Attributes Scope Attribute Description weblogic.security.saml.atn DebugSecuritySAMLAtn Prints information about SAML 1.1 authentication provider processing. weblogic.security.saml.credmap DebugSecuritySAMLCredMap Prints information about SAML 1.1 credential mapping provider processing. weblogic.security.saml.lib DebugSecuritySAMLLib Prints information about SAML 1.1 library processing. weblogic.security.saml.service DebugSecuritySAMLService Prints information about SAML 1.1 SSO profile services. Table 7–3 SAML 2.0 Debug Scopes and Attributes Scope Attribute Description weblogic.security.saml2.atn DebugSecuritySAML2Atn Prints information about SAML 2.0 authentication provider processing. weblogic.security.saml2.credm ap DebugSecuritySAML2CredMa p Prints information about SAML 2.0 credential mapping provider processing. weblogic.security.saml2.lib DebugSecuritySAML2Lib Prints information about SAML 2.0 library processing. weblogic.security.saml2.servi ce DebugSecuritySAML2Servic e Prints information about SAML 2.0 SSO profile services. 7-22 Securing Oracle WebLogic Server

7.4.2 Enabling Debugging Using the Command Line

You can enable debug scopes or attributes by passing them as options in the command that starts WebLogic Server. The command line options you can use for enabling SAML debugging by attribute are listed in Table 7–4 . This method for enabling SAML debugging is static and can only be used at server startup.

7.4.3 Enabling Debugging Using the WebLogic Server Administration Console