SP: Assertion contains an unacceptable AudienceRestriction

[Nate Klingenstein]

Well, /SAML2/POST, presumably, but the former.  The latter is a URI that can be used to invoke authentication by redirecting the user to it.  They’re both configurable, but there’s rarely any need to modify them.

On Aug 14, 2015, at 5:30 PM, Scott Gerlach <sgerlach at gmail.com<mailto:sgerlach at gmail.com>> wrote:

Quick question on this topic, is the IdP/Browser supposed to be posting back to the /Shibboleth.sso/SAML/POST URI or the /Shibboleth.sso/Login URI? I was reading some other threads and though I thought I knew, I am now confused...

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150814/d4192af3/attachment.html>