OpenConext / OpenConext/OpenConext-engineblock

Monitoring attributes per IdP

Open
#1,877 2 comments 0 reactions 1 assignee View on GitHub

@baszoetekouw is already working on this.

Since Oct 10, 2025.

needs-discussion
Dominant language
PHP
Stars
17
Forks
25
Avg merge
4d 1h
Merged PRs (30d)
1

Description

We would like to keep records of which attributes are given out per IdP. So we would like to get an overview like this:

- idp: https://entityid.example.com/
  num_authentications: 1200
  attributes:
    - uid: 1199
    - schacHomeOrg: 1200
    - displayName: 1167
    - mail: 999
    - edupersonAffiliation: 321
    - isMemberOf: 2

meaning that that total number of authentication from this service was 1200, all authentications had schacHome in the assertion, 1 was missing a uid (which caused an error, obviously), 999 had a mail address, etc.

Note that we thus not only want to count successful logins, but also errors (as long a valid assertion was received).

I don't think that EB needs to aggregate the statistics to the form as specified here; logging a proper line per login that can be processed offline probably suffices.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.