Audience Child Element of SAML2SSOProfile

Cantor, Scott cantor.2 at osu.edu
Mon Sep 8 10:02:58 EDT 2014


On 9/8/14, 1:57 AM, "Ian MacDonald" <ian+list at dotto-one.com> wrote:

>And added the Audience Child Element similar to below:
>   <rp:RelyingParty id="https://service.providerlogin.com
><https://service.providerlogin.com/>"
>provider="https://my.idp.com/idp/shibboleth"
>defaultSigningCredentialRef="IdPCredential">
>      <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
>encryptAssertions="never" encryptNameIds="never">
>              <rp:Audience>https://saml2.providerlogin.com
><https://saml2.providerlogin.com/></rp:Audience>

I'd have to look, but I would imagine the element is supposted to be in
the normal SAML namespace, not ours.

>What I end up with is a SAXParseException error on the relying-party.xml
>file that is confusing because it states that the element is incorrect,
>and then lists it as potentially acceptable elements.

Look closer at the message and you'll see that's not true. It notes the
namespaces of the content it will look for.

-- Scott



More information about the users mailing list