<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span>OK, I used this example for the IDp:</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="background-color: transparent;"><span><pre style="color: rgb(34, 34, 34); font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, serif; font-size: 14px; font-style: normal; white-space: pre-wrap; max-height: 600px; width: auto; background-color: rgb(238, 238, 238); margin-bottom: 10px; padding: 5px; vertical-align: baseline; line-height: 18px; overflow: auto; margin-top: 0px; border: 0px;"><code style="margin: 0px; padding: 0px; border: 0px;
vertical-align: baseline; font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, serif;"><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"> </span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"><</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">Conditions</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"> </span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">NotBefore</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color:
transparent;">=</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(128, 0, 0);">"2007-02-07T20:22:<wbr>58.162Z"</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"> </span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">NotOnOrAfter</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">=</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(128, 0, 0);">"2007-02-07T20:<wbr>24:58.162Z"</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">></span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;
background-color: transparent;">
</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"><</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">AudienceRestrictionCondition</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">></span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">
</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"><</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">Audience</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">></span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">http</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">:</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: gray;">//<a href="http://www.example2.com/" target="_blank" style="color: rgb(17, 85, 204);">www.example2.<wbr>com</a></Audience> </span><span style="margin: 0px; padding: 0px; border: 0px;
vertical-align: baseline; background-color: transparent;">
</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"></</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">AudienceRestrictionCondition</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"><wbr>></span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">
</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"></</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent; color: rgb(43, 145, 175);">Conditions</span><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">></span></code></pre><pre style="color: rgb(34, 34, 34); font-family: Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, serif; font-size: 14px; font-style: normal; white-space: pre-wrap; max-height: 600px; width: auto; background-color: rgb(238, 238, 238); margin-bottom: 10px; padding: 5px; vertical-align: baseline; line-height: 18px; overflow: auto; margin-top: 0px; border: 0px;"><code style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; font-family:
Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, serif;"><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;">The Idp tried both of these:</span></code></pre><pre style="max-height: 600px; width: auto; background-color: rgb(238, 238, 238); margin-bottom: 10px; padding: 5px; vertical-align: baseline; overflow: auto; margin-top: 0px; border: 0px;"><code style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline;"><span style="margin: 0px; padding: 0px; border: 0px; vertical-align: baseline; background-color: transparent;"><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif;
color: rgb(31, 73, 125);"><saml:Conditions NotBefore="2013-02-07T19:51:<wbr>27Z" NotOnOrAfter="2013-02-07T19:<wbr>57:27Z"><u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><AudienceRestriction><u></u><u></u></span></div><div class="MsoNormal" style="background-color: rgb(255, 255, 255);"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size: 11pt; white-space: normal;"><Audience></span></font><font color="#1155cc" face="Calibri, sans-serif"><span style="font-size: 15px; white-space: normal;"><u>https://shib.lynda.com/shibboleth-sp</u></span></font><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size: 11pt;
white-space: normal;"></Audience><u></u><u></u></span></font></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></AudienceRestriction><u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></saml:Conditions><u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal;
white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><u></u> <u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">Or:<u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><u></u> <u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size:
12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><saml:Conditions NotBefore="2013-02-07T19:46:<wbr>48Z" NotOnOrAfter="2013-02-07T19:<wbr>52:48Z"><u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><AudienceRestrictionCondition><u></u><u></u></span></div><div class="MsoNormal" style="background-color: rgb(255, 255, 255);"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size: 11pt; white-space: normal;"><Audience></span></font><font color="#1155cc" face="Calibri,
sans-serif"><span style="font-size: 15px; white-space: normal;"><u>https://shib.lynda.com/shibboleth-sp</u></span></font><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size: 11pt; white-space: normal;"></Audience><u></u><u></u></span></font></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"></<wbr>AudienceRestrictionCondition><u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; font-style: normal; line-height: normal; white-space: normal; background-color: rgb(255, 255, 255);"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73,
125);"></saml:Conditions></span></div><div class="MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><br></span></div><div class="MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">And gets this error with either one:</span></div><div class="MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 11pt; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color:
rgb(31, 73, 125);"><br></span></div><div class="MsoNormal" style="color: rgb(31, 73, 125); font-family: Calibri, sans-serif; font-size: 15px; font-style: normal; line-height: normal; white-space: normal; background-color: transparent;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; background-color: rgb(255, 255, 255);"><span lang="EN">xmltooling::<wbr>UnmarshallingException at (<a href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target="_blank" style="color: rgb(17, 85, 204);">https://shib.lynda.com/<wbr>Shibboleth.sso/SAML2/POST</a>)<u></u><u></u></span></div><div class="MsoNormal" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 12.571428298950195px; background-color: rgb(255, 255, 255);"><span lang="EN">Invalid child element:
AudienceRestriction</span></div></span></div></span></code></pre></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, February 7, 2013 11:40 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> RE: IdP initiated SSO<br> </font> </div> <br>
> OK I dug up the setting in the Wiki, re-tested and we get this error:<br><br>Cool, or not so cool I suppose, that really should be getting logged. Sigh.<br> <br>> AudienceRestriction must have at least one Audience<br><br>There's your bug then.<br><br>> Googling around with that, I assume the entityID for the request as the value<br>> for this should work, correct?<br><br>Yes, that's set to the entityID of your SP.<br> <br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>