Start/notes.ini Parameters/WEBAUTH_VERBOSE_TRACE

WEBAUTH_VERBOSE_TRACE

🛠️
Parameter: WEBAUTH_VERBOSE_TRACE
Short description: Verbose tracing of web authentication (DSAPI filters, SAML, cookies). Output goes to the console log or debug outfile.

Profile

Parameter
WEBAUTH_VERBOSE_TRACE
Category
Logging / Debug
Component
Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
notes.ini only (no GUI)
Possible values
0 = off (default) • 1 = verbose tracing

Description

WEBAUTH_VERBOSE_TRACE=1 enables detailed logging for every step of HTTP authentication in Domino: the DSAPI filter call chain, validation of session cookies, SSO / LTPA tokens, SAML assertions, and fallback to basic auth. The output lands on the server console or – if enabled – in the debug outfile.
The parameter is the most important tool for HTTP login problems, especially when SSO, SAML, or custom DSAPI filters are in use. Because the tracing is very chatty, it should only be enabled temporarily and reset to 0 after analysis.

Example configuration

WEBAUTH_VERBOSE_TRACE=1

Notes & pitfalls

  • Generates a lot of console output – enable permanently only for diagnostics.
  • Logs may contain sensitive data (user names, tokens) – handle accordingly when sending to support.
  • Typically takes effect without a restart (or via restart task http).
  • Complementary to DEBUG_DSAPI, DEBUG_SAML, WebSess_Verbose_Trace.