[External] Re: Error: Assertion contains an unacceptable AudienceRestriction

[Andrea Giammaria]

I've set the applicationid in the vhost to match the ID I have in shibboleth2.xml for custom attribute mapping:

<ApplicationOverride entityID="https://testhd.test.mydomain/shibboleth" id="testhd">
	<AttributeExtractor type="XML" validate="true" reloadChanges="false" path="attribute-map-testhd.xml"/>
</ApplicationOverride>

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: giovedì 29 ottobre 2020 16:51
To: users at shibboleth.net
Subject: [External] Re: Error: Assertion contains an unacceptable AudienceRestriction

* Andrea Giammaria via users <users at shibboleth.net> [2020-10-29 16:41]:
> I know that this is somewhat related to a mismatch between some 
> EntityID and the Assertion Consumer Service URL but I have no clue at 
> moment.

Not quite, it's the entityID the SP thinks is its name and the entityID sent by the IDP as Audience(Restriction).

Short version: Why did you set this in your virtual_host.conf?

  ShibRequestSetting applicationId "testhd"

-peter