1. Go to Authentication > Token Exchange > Token Processors.
  2. On the Token Attributes tab, in the Mask Log Values section, select the check box for the attribute whose value you want to mask in logs.

    If OGNL expressions might be used to map derived values into outgoing tokens and you want those values masked in logs as well, select the Mask All OGNL-expression Generated Log Values check box under the list of attributes.