1. Go to Authentication > Token Exchange > Token Processors.
  2. On the Token Attributes tab, in the Mask Log Values section, select the check box for the attribute whose value you want to mask in logs.
    Note:

    If OGNL expressions might be used to map derived values into outgoing tokens and you want those values masked in logs as well, select the Mask All OGNL-expression Generated Log Values check box under the list of attributes.