<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>This is what was sent:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;"><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"><</span><span style="font-size: 10pt; font-family: 'Courier New'; color: rgb(163, 21, 21);">saml:SubjectConfirmation</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"> </span><span style="font-size: 10pt; font-family: 'Courier New'; color: red;">Method</span><span
style="font-size: 10pt; font-family: 'Courier New'; color: blue;">=</span><span style="font-size: 10pt; font-family: 'Courier New';">"<span style="color: blue;">urn:oasis:names:tc:<wbr>SAML:2.0:cm:holder-of-key</span>"<span style="color: blue;">><u></u><u></u></span></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;"><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"> <</span><span style="font-size: 10pt; font-family: 'Courier New'; color: rgb(163, 21, 21);">saml:SubjectConfirmation</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"> </span><span style="font-size: 10pt; font-family: 'Courier New'; color: red;">Method</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;">=</span><span style="font-size: 10pt; font-family: 'Courier New';">"<span style="color:
blue;">urn:oasis:names:tc:<wbr>SAML:2.0:cm:bearer</span>"<span style="color: blue;">><u></u><u></u></span></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;"><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"> <</span><span style="font-size: 10pt; font-family: 'Courier New'; color: rgb(163, 21, 21);">saml:SubjectConfirmationData</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"> </span><span style="font-size: 10pt; font-family: 'Courier New'; color: red;">NotOnOrAfter</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;">=</span><span style="font-size: 10pt; font-family: 'Courier New';">""<span style="color: blue;"> </span><span style="color: red;">Recipient</span><span style="color: blue;">=</span>"<span style="color: blue;"><a
href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target="_blank" style="color: rgb(17, 85, 204);">https://shib.lynda.<wbr>com/Shibboleth.sso/SAML2/POST</a></span>"<span style="color: blue;"><wbr>/><u></u><u></u></span></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;"><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"> </</span><span style="font-size: 10pt; font-family: 'Courier New'; color: rgb(163, 21, 21);">saml:SubjectConfirmation</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;">><u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;"><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;"></</span><span style="font-size: 10pt; font-family: 'Courier New'; color: rgb(163, 21,
21);">saml:SubjectConfirmation</span><span style="font-size: 10pt; font-family: 'Courier New'; color: blue;">></span></div></span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Mike Flynn <shibbolethlynda@yahoo.com><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, February 7, 2013 1:23 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: IdP initiated SSO<br> </font> </div> <br>
<div id="yiv291132927"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div><span>Thanks. That leads me to the next item:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;">Unable to locate satisfiable bearer SubjectConfirmation in assertion.</span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size:
13px;"><br></span></span></div><div style="color: rgb(34, 34, 34); font-size: 13px; font-family: arial, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;">Googling that produced a lot of code samples that generate the message but little else...</span></span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Brent Putman <putmanb@georgetown.edu><br> <b><span style="font-weight:bold;">To:</span></b> users@shibboleth.net <br> <b><span style="font-weight:bold;">Sent:</span></b> Thursday, February 7, 2013 1:08 PM<br> <b><span style="font-weight:bold;">Subject:</span></b> Re: IdP initiated SSO<br> </font>
</div> <br>
<div id="yiv291132927">
<div>
<br>
<div class="yiv291132927moz-cite-prefix">On 2/7/13 3:43 PM, Mike Flynn wrote:<br>
</div>
<blockquote type="cite">
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: arial, helvetica, sans-serif; font-size: 12pt;"><code style="margin:0px;padding:0px;border:0px;vertical-align:baseline;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans
Mono', 'Courier New', monospace, serif;"><span style="margin:0px;padding:0px;border:0px;vertical-align:baseline;background-color:transparent;">The Idp tried both of these:</span></code>
<div style="background-color:transparent;"><span>
<pre style="max-height:600px;width:auto;background-color:rgb(238, 238, 238);margin-bottom:10px;padding:5px;vertical-align:baseline;overflow:auto;margin-top:0px;border:0px;"><code style="margin:0px;padding:0px;border:0px;vertical-align:baseline;"><span style="margin:0px;padding:0px;border:0px;vertical-align:baseline;background-color:transparent;"><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><saml:Conditions NotBefore="2013-02-07T19:51: 27Z" NotOnOrAfter="2013-02-07T19: 57:27Z"></span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal;
white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><AudienceRestriction></span></div><div class="yiv291132927MsoNormal" style="background-color:rgb(255, 255, 255);"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt;white-space:normal;"><Audience></span></font><font color="#1155cc" face="Calibri, sans-serif"><span style="font-size:15px;white-space:normal;"><u><a rel="nofollow" class="yiv291132927moz-txt-link-freetext" target="_blank" href="https://shib.lynda.com/shibboleth-sp">https://shib.lynda.com/shibboleth-sp</a></u></span></font><font color="#1f497d" face="Calibri, sans-serif"><span></Audience></span></font></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal;
background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></AudienceRestriction></span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></saml:Conditions></span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif;
font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Or:</span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><saml:Conditions NotBefore="2013-02-07T19:46:
48Z" NotOnOrAfter="2013-02-07T19: 52:48Z"></span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><AudienceRestrictionCondition></span></div><div class="yiv291132927MsoNormal" style="background-color:rgb(255, 255, 255);"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt;white-space:normal;"><Audience></span></font><font color="#1155cc" face="Calibri,
sans-serif"><span style="font-size:15px;white-space:normal;"><u><a rel="nofollow" class="yiv291132927moz-txt-link-freetext" target="_blank" href="https://shib.lynda.com/shibboleth-sp">https://shib.lynda.com/shibboleth-sp</a></u></span></font><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt;white-space:normal;"></Audience></span></font></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></ AudienceRestrictionCondition></span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color:
rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif;"></saml:Conditions></span></div><div class="yiv291132927MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">
</span></div><div class="yiv291132927MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">And gets this error with either one:</span></div><div class="yiv291132927MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">
</span></div><div class="yiv291132927MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; background-color: rgb(255, 255, 255);"><span lang="EN">xmltooling:: UnmarshallingException at (<a rel="nofollow" target="_blank" href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" style="color:rgb(17, 85, 204);">https://shib.lynda.com/ Shibboleth.sso/SAML2/POST</a>)</span></div><div class="yiv291132927MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; background-color: rgb(255, 255, 255);"><span lang="EN">Invalid child element:
AudienceRestriction</span></div></span></div></span></code></pre>
</span></div>
</div>
</blockquote>
<br>
<br>
<br>
It's missing the namespace prefix. If they're binding the SAML
namespace URI to prefix "saml", then those elements would be
saml:AudienceRestriction, saml:Audience, etc.<br>
<br>
AudienceRestrictionCondition doesn't exist in SAML. It should be
similar to the first one you have above.<br>
<br>
<br>
<br>
<br>
<br>
<br>
</div>
</div><br>--<br>To unsubscribe from this list send an email to <a rel="nofollow" ymailto="mailto:users-unsubscribe@shibboleth.net" target="_blank" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br> </div> </div> </div></div></div><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br> </div> </div> </div></body></html>