Enabling Debugging Using the WebLogic Server Administration Console

7-22 Securing Oracle WebLogic Server

7.4.2 Enabling Debugging Using the Command Line

You can enable debug scopes or attributes by passing them as options in the command that starts WebLogic Server. The command line options you can use for enabling SAML debugging by attribute are listed in Table 7–4 . This method for enabling SAML debugging is static and can only be used at server startup.

7.4.3 Enabling Debugging Using the WebLogic Server Administration Console

To configure SAML debugging using the WebLogic Server Administration Console, complete the following steps: 1. If you have not already done so, in the Change Center of the Administration Console, click Lock Edit see Use the Change Center. 2. In the left pane of the console, expand Environment and select Servers. 3. On the Summary of Servers page, click the server on which you want to enable or disable debugging to open the settings page for that server.

4. Click Debug.

5. Expand weblogic.

6. Expand security.

7. Enable SAML debugging as follows:

■ To enable the SAML 1.1 debug scope, which encompasses all the SAML 1.1 attributes, select saml, then click Enable. ■ To enable one or more individual SAML 1.1 debug attributes, expand saml, expand the scope of the desired attribute, select the desired individual SAML 1.1 attribute, then click Enable. For example, expand saml, expand atn, and select the DebugSecuritySAMLAtn attribute to debug SAML 1.0 authentication processing. ■ To enable the SAML 2.0 debug scope, which encompasses all the SAML 2.0 attributes, select saml2, then click Enable. ■ To enable one or more individual SAML 2.0 debug attributes, expand saml2, expand the scope of the desired attribute, select the desired individual SAML 2.0 attribute, then click Enable. For example, expand saml2, expand credmap, and select the DebugSecuritySAML2Credmap attribute to debug SAML 2.0 credential mapping provider processing. For a description of each registered SAML debug attribute, see Section 7.4.1, About SAML Debug Scopes and Attributes. Table 7–4 Command Line Options for SAML Debugging SAML Version Available Command Line Options for Debugging SAML 1.1 -Dweblogic.debug.DebugSecuritySAMLAtn=true -Dweblogic.debug.DebugSecuritySAMLCredMap=true -Dweblogic.debug.DebugSecuritySAMLLib=true -Dweblogic.debug.DebugSecuritySAMLService=true SAML 2.0 -Dweblogic.debug.DebugSecuritySAML2Atn=true -Dweblogic.debug.DebugSecuritySAML2CredMap=true -Dweblogic.debug.DebugSecuritySAML2Lib=true -Dweblogic.debug.DebugSecuritySAML2Service=true Configuring Single Sign-On with Web Browsers and HTTP Clients 7-23 8. To activate these changes, in the Change Center of the Administration Console, click Activate Changes see Use the Change Center. Changes to SAML debug scopes and attributes take effect immediately — no restart is necessary. Using the Administration Console to enable or disable SAML debugging is dynamic and can be used while the server is running. For more information, see Define debug settings in the Oracle WebLogic Server Administration Console Help.

7.4.4 Enabling Debugging Using the WebLogic Scripting Tool