---
title: Setting attribute masking
description: Mask attribute values that PingFederate logs from a processor instance at runtime.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_tokenprocessorinstancetasklet_attributevaluemaskstate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_tokenprocessorinstancetasklet_attributevaluemaskstate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  steps: Steps
---

# Setting attribute masking

Mask attribute values that PingFederate logs from a processor instance at runtime.

## Steps

1. Go to **Authentication > Token Exchange > Token Processors**.

2. On the **Token Attributes** tab, in the **Mask Log Values** section, select the checkbox for the attribute whose value you want to mask in logs.

   |   |                                                                                                                                                                                                                                    |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | If OGNL expressions might be used to map derived values into outgoing tokens and you want those values masked in logs as well, select the **Mask All OGNL-expression Generated Log Values** checkbox under the list of attributes. |