> Audience Restriction > https://webserver.mycompany.com The Audience value needs to match the entityID of the SP (and should be automatically determined, but that's on Okta). -- Scott