<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Thanks. That leads me to the next item:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;">Unable to locate satisfiable bearer SubjectConfirmation in assertion.</span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;"><br></span></span></div><div style="color:
rgb(34, 34, 34); font-size: 13px; font-family: arial, sans-serif; background-color: transparent; font-style: normal;"><span><span style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;">Googling that produced a lot of code samples that generate the message but little else...</span></span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Brent Putman <putmanb@georgetown.edu><br> <b><span style="font-weight: bold;">To:</span></b> users@shibboleth.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, February 7, 2013 1:08 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: IdP initiated SSO<br> </font> </div> <br>
<div id="yiv1751803228">
<div>
<br>
<div class="yiv1751803228moz-cite-prefix">On 2/7/13 3:43 PM, Mike Flynn wrote:<br>
</div>
<blockquote type="cite">
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: arial, helvetica, sans-serif; font-size: 12pt;"><code style="margin:0px;padding:0px;border:0px;vertical-align:baseline;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans
Mono', 'Courier New', monospace, serif;"><span style="
margin:0px;padding:0px;border:0px;vertical-align:baseline;background-color:transparent;">The Idp tried both of these:</span></code>
<div style="background-color:transparent;"><span>
<pre style="max-height:600px;width:auto;background-color:rgb(238, 238, 238);margin-bottom:10px;padding:5px;vertical-align:baseline;overflow:auto;margin-top:0px;border:0px;"><code style="margin:0px;padding:0px;border:0px;vertical-align:baseline;"><span style="margin:0px;padding:0px;border:0px;vertical-align:baseline;background-color:transparent;"><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><saml:Conditions NotBefore="2013-02-07T19:51: 27Z" NotOnOrAfter="2013-02-07T19: 57:27Z"></span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal;
white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><AudienceRestriction></span></div><div class="yiv1751803228MsoNormal" style="background-color:rgb(255, 255, 255);"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt;white-space:normal;"><Audience></span></font><font color="#1155cc" face="Calibri, sans-serif"><span style="font-size:15px;white-space:normal;"><u><a rel="nofollow" class="yiv1751803228moz-txt-link-freetext" target="_blank" href="https://shib.lynda.com/shibboleth-sp">https://shib.lynda.com/shibboleth-sp</a></u></span></font><font color="#1f497d" face="Calibri, sans-serif"><span></Audience></span></font></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal;
background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></AudienceRestriction></span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></saml:Conditions></span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial,
sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Or:</span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><saml:Conditions NotBefore="2013-02-07T19:46:
48Z" NotOnOrAfter="2013-02-07T19: 52:48Z"></span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><AudienceRestrictionCondition></span></div><div class="yiv1751803228MsoNormal" style="background-color:rgb(255, 255, 255);"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt;white-space:normal;"><Audience></span></font><font color="#1155cc" face="Calibri,
sans-serif"><span style="font-size:15px;white-space:normal;"><u><a rel="nofollow" class="yiv1751803228moz-txt-link-freetext" target="_blank" href="https://shib.lynda.com/shibboleth-sp">https://shib.lynda.com/shibboleth-sp</a></u></span></font><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt;white-space:normal;"></Audience></span></font></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></ AudienceRestrictionCondition></span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color:
rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif;"></saml:Conditions></span></div><div class="yiv1751803228MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">
</span></div><div class="yiv1751803228MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">And gets this error with either one:</span></div><div class="yiv1751803228MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">
</span></div><div class="yiv1751803228MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; background-color: rgb(255, 255, 255);"><span lang="EN">xmltooling:: UnmarshallingException at (<a rel="nofollow" target="_blank" href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" style="color:rgb(17, 85, 204);">https://shib.lynda.com/ Shibboleth.sso/SAML2/POST</a>)</span></div><div class="yiv1751803228MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; background-color: rgb(255, 255, 255);"><span lang="EN">Invalid child element:
AudienceRestriction</span></div></span></div></span></code></pre>
</span></div>
</div>
</blockquote>
<br>
<br>
<br>
It's missing the namespace prefix. If they're binding the SAML
namespace URI to prefix "saml", then those elements would be
saml:AudienceRestriction, saml:Audience, etc.<br>
<br>
AudienceRestrictionCondition doesn't exist in SAML. It should be
similar to the first one you have above.<br>
<br>
<br>
<br>
<br>
<br>
<br>
</div>
</div><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br> </div> </div> </div></body></html>