Assertion contains an unacceptable AudienceRestriction.

[Micky Williamson]

That was the final thing that was off.  I now have a working implementation of a silo’d environment.  What I need to do next is see if I can figure a way out to get Okta/Shibboleth to be just a single configuration, where the apache RP could interrogate the inbound traffic and route it to the proper silo.  This would make the shibboleth and Okta config much easier to maintain.

But for now.it<http://now.it>’s working!  Thanks Scott!


Micky Williamson

Senior Technical Leader
mwilliamson at silasg.com<mailto:mwilliamson at silasg.com>
C - 720 339 7657
D  - 206 508 4908



On Jul 14, 2016, at 5:01 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:

Audience Restriction
https://webserver.mycompany.com

The Audience value needs to match the entityID of the SP (and should be automatically determined, but that's on Okta).

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


This communication may contain proprietary or other confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160718/7fe00f19/attachment.html>