SP: Assertion contains an unacceptable AudienceRestriction.

[Rainer Hoerbe]

I changed my config to shibbolize / instead of /secure, which I planned to do anyway.

When you say move "it" up to the vhost - what did you mean with "it"?

- Rainer

Am 21.09.2012 um 18:29 schrieb Peter Schober <peter.schober at univie.ac.at>:

> * Rainer Hoerbe <rainer at hoerbe.at> [2012-09-21 18:17]:
>> Why should this be path-based? My ssl.conf contains:
>> 
>> <VirtualHost 46.252.26.58:443>
>> 	ServerName samlecho2.hoerbe.at
>> 	<Location /secure>
>> 	  AuthType shibboleth
>> 	  ShibRequestSetting applicationId default
>> 	  ShibRequestSetting requireSession true
>> 	  require valid-user
>> 	</Location>
>> </VirtualHost>
>> <VirtualHost 46.252.26.58:443>
>> 	ServerName pvpsaml2.portalverbund.at
>> 	<Location /secure>
>> 	  AuthType shibboleth
>> 	  ShibRequestSetting applicationId pvpsaml2
>> 	  ShibRequestSetting requireSession true
>> 	  require valid-user
>> 	</Location>
>> </VirtualHost>
> 
> I'd move it up to the vhost (and only have the required session on a
> path) and then each handlerURL will be in ^/Shibboleth.sso for that
> vhost. Everything except /secure would be in the "default" applicaton
> which has different ACS URLs (and a different EntityID).
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net