[External] Re: Error: Assertion contains an unacceptable AudienceRestriction

[Andrea Giammaria]

Well... things are a little more complicated since it's not only about custom attribute mapping. We are using Apache with Shibboleth SP as a reverse proxy to provide SSO to a set of custom web applications. The use of the Application Override is because the shibboleth server is proxying several different applications, each with it's own DNS name, virtual host file, set of attributes etc... I'm clearly not a shibboleth guru since I discovered it just some months ago but I found that this configuration well suits my needs since it's easy to understand and to maintain. Should I be concerned for something?

By the way I've managed to solve the AudienceRestriction issue: the mismatch problem was in the Apache virtual host configuration, once fixed that, everything worked fine!

On 10/29/20, 12:25 PM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

>    (Sorry to be questioning your motivation, with overrides questioning
>    their use has been pretty much established procedure here. ;))

Yes, for all that's holy, do NOT do that. The alias feature to map attributes to multiple names, while deprecated, would be better to use than that.

-- Scott