about Audience policy

[Paolo Veronesi]

Hi,

i have the following configuration:

>    <RequestMapper type="Native">
>       <RequestMap applicationId="default">
>          <Host name="www.fake_pippo.org">
>              <Path name="secure" applicationId="pippo"/>
>              <Path name="secure2" applicationId="pippo2"/>
>          </Host>
>       </RequestMap>
>    </RequestMapper>


>    <ApplicationOverride id="pippo" 
> entityID="https://www.fake_pippo.org/shibboleth"
>    [...]
>    </ApplicationOverride>
>
>      [...]
>
>    <ApplicationOverride id="pippo2" 
> entityID="https://www2.fake_pippo.org/shibboleth"
>    [...]
>    </ApplicationOverride>



  *     http://www.fake_pippo.org/secure works

  *     http://www.fake_pippo.org/secure2 does not work: Assertion
    contains an unacceptable AudienceRestriction (the entityID of
    applicationId="pippo")

>             [...]
>             <saml2:AudienceRestriction>
> <saml2:Audience>https://www.fake_pippo.org/shibboleth</saml2:Audience>
>             </saml2:AudienceRestriction>
>             [...]


As far as i understand, i need to modify security-policy.xml for the 
application id="pippo" in order to accept both 
https://www.fake_pippo.org/shibboleth and 
https://www2.fake_pippo.org/shibboleth as Audience, but it is not clear 
to me how.

Any hint?

Best regards,
   Paolo

-- 
Paolo Veronesi
--------------------------------------------------------------
Divisione DataCenter&Cloud
Attivazione&Esercizio DC&Cloud
CUP 2000 S.c.p.A. - www.cup2000.it
Via del Borgo di S. Pietro, 90/c - 40126 Bologna
Tel: +39 051 4208571  | e-mail: paolo.veronesi at cup2000.it
Fax +39 051 4208511



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180629/a7880d2d/attachment.html>