IdP initiated SSO

[Cantor, Scott]

> OK I dug up the setting in the Wiki, re-tested and we get this error:

Cool, or not so cool I suppose, that really should be getting logged. Sigh.
 
> AudienceRestriction must have at least one Audience

There's your bug then.

> Googling around with that, I assume the entityID for the request as the value
> for this should work, correct?

Yes, that's set to the entityID of your SP.
 
-- Scott