Error: Assertion contains an unacceptable AudienceRestriction

[Andrea Giammaria]

Hello,

I've setup Shibboleth SP for integrating with ADFS as IdP.

I'm using a test application in a vhost configuration, the application is a simple Java servlet that display the SAML attributes contained in the assertion. When I open the application URL I'm correctly been redirected to ADFS login page but after I give my credential an error is displayed: Assertion contains an unacceptable AudienceRestriction. In the shibd.log there are the following errors:

2020-10-29 15:24:28 WARN OpenSAML.SecurityPolicyRule.AudienceRestriction [1] [default]: unacceptable AudienceRestriction in assertion (<AudienceRestriction xmlns="urn:oasis:names:tc:SAML:2.0:assertion"><Audience>https://testhd.test.mydomain/shibboleth</Audience></AudienceRestriction>)
2020-10-29 15:24:28 WARN Shibboleth.SSO.SAML2 [1] [default]: detected a problem with assertion: Assertion contains an unacceptable AudienceRestriction.
2020-10-29 15:24:28 WARN Shibboleth.SSO.SAML2 [1] [default]: error processing incoming assertion: Assertion contains an unacceptable AudienceRestriction.
2020-10-29 15:24:28 WARN OpenSAML.SecurityPolicyRule.AudienceRestriction [1] [default]: unacceptable AudienceRestriction in assertion (<AudienceRestriction xmlns="urn:oasis:names:tc:SAML:2.0:assertion"><Audience>https://testhd.test.mydomain/shibboleth</Audience></AudienceRestriction>)
2020-10-29 15:24:28 WARN Shibboleth.SSO.SAML2 [1] [default]: detected a problem with assertion: Assertion contains an unacceptable AudienceRestriction.
2020-10-29 15:24:28 WARN Shibboleth.SSO.SAML2 [1] [default]: error processing incoming assertion: Assertion contains an unacceptable AudienceRestriction.

I know that this is somewhat related to a mismatch between some EntityID and the Assertion Consumer Service URL but I have no clue at moment.

Configuration files are attached.

Can anybody help me out?

Thanks in advance,
Treuz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201029/621d0041/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: httpd.conf
Type: application/octet-stream
Size: 11846 bytes
Desc: httpd.conf
URL: <http://shibboleth.net/pipermail/users/attachments/20201029/621d0041/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: shibboleth2.xml
Type: application/xml
Size: 5980 bytes
Desc: shibboleth2.xml
URL: <http://shibboleth.net/pipermail/users/attachments/20201029/621d0041/attachment.wsdl>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: virtual_host.conf
Type: application/octet-stream
Size: 924 bytes
Desc: virtual_host.conf
URL: <http://shibboleth.net/pipermail/users/attachments/20201029/621d0041/attachment-0001.obj>