SP: Assertion contains an unacceptable AudienceRestriction.

[Rainer Hoerbe]

I am trying to figure out the mechanics of <ApplicationOverride>. After reading NativeSPApplicationOverride back and forth I am stuck:

2012-09-21 17:46:52 ERROR OpenSAML.SecurityPolicyRule.AudienceRestriction [1]: unacceptable AudienceRestriction in assertion (<saml2:AudienceRestriction xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><saml2:Audience>https://pvpsaml2.portalverbund.at/shibboleth</saml2:Audience></saml2:AudienceRestriction>)

Shibboleth2.xml:
        <ApplicationOverride id="pvpsaml2" entityID="https://pvpsaml2.portalverbund.at/shibboleth" />


ssl.conf:
 	<Location /secure>
	  AuthType shibboleth
	  ShibRequestSetting applicationId pvpsaml2
	  ShibRequestSetting requireSession true
	  require valid-user
	</Location>

http://metadata.portalverbund.at//testfed-metadata.xml:
The enitityID https://pvpsaml2.portalverbund.at/shibboleth has a proper SAML2/POST ACS, otherwise it would not receive the response.

What else can be done wrong?

- Rainer