On Fri, Nov 13, 2020 at 1:59 PM Tyler Marcotte <marcott...@gmail.com> wrote:
> Hi there, > > I've successfully enabled SAML auth against our Azure AD infrastructure. > One thing that I'm trying to figure out though is how to use the > 'saml-group-attribute' value. From reading the description in the docs, it > looks like I should be able to assign group membership based off a SAML > response. > > Yes, this *should* work, but, I wrote the SAML extension, so it's quite possible that there's a bug/mistake there :-). > Assuming that's correct, I'm trying to look into the SAML response from > the server, but I don't see the SAML Debug logs in the syslog directory or > the catalina.out file. > > Is there additional debug I need to enable so I can see what the idp is > providing back to guacamole? > > Possibly so - you may need to turn up debug logging for the web app as a whole in logback.xml: http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging -Nick >
