IdPv3 equivalent of <saml:Audience>

Yavor Yanakiev yavor at nyu.edu
Fri Oct 30 00:51:00 EDT 2015


I'm not sure if I did it right but here is my configuration

------------------------------------------------------
        <bean parent="RelyingPartyByName" c:relyingPartyIds="
https://nyu.employee.com">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" p:signAssertions="true"
p:signResponses="false"

p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName">
                        <property name="additionalAudienceForAssertion">
                                <set>
                                        <value>
http://nyu.employee.com/oba/login/sso/saml</value>
                                </set>
                        </property>
                    </bean>
                </list>
            </property>
        </bean>
------------------------------------------------------

and here is what I got

------------------------------------------------------

ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception
java.lang.ClassCastException:
com.google.common.collect.SingletonImmutableSet cannot be cast to
java.lang.String
at
org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions.addAudienceRestriction(AddAudienceRestrictionToAssertions.java:237)




On Thu, Oct 29, 2015 at 3:09 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/29/15, 2:42 PM, "users on behalf of Yavor Yanakiev" <
> users-bounces at shibboleth.net on behalf of yavor at nyu.edu> wrote:
>
>
>
> >I couldn't find an equivalent of <Audience> in the IdPv3 documentation. I
> also looked at the mailing list and the javadocs but no solution so far.
>
> There should be a property on the profile configuration beans,
> additionalAudienceForAssertion.
>
> If you were using an older config, that should still work.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Yavor Yanakiev
Systems Developer for Identity Services
212-992-7585
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151030/4ae5d512/attachment.html>


More information about the users mailing list