<div dir="ltr">Thanks for the hints, Peter. I searched the Google groups and found that I should switch on the "Domain specific issuer" checkbox, as well as using the full email address as the NameID. (<a href="https://groups.google.com/forum/#!topic/google-apps-saml-sso/ZJxr-T9dYig">https://groups.google.com/forum/#!topic/google-apps-saml-sso/ZJxr-T9dYig</a>)<div><br></div><div> -Andrew</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 19, 2015 at 10:50 AM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Andrew Cheung <<a href="mailto:acheung@brookfieldres.com">acheung@brookfieldres.com</a>> [2015-01-19 16:22]:<br>
<span class="">><br>
> I used SAML tracer in firefox to examine the SAML requests, and observed<br>
> that the first SAML request has<br>
><br>
> AssertionConsumerServiceURL="<a href="https://www.google.com/a/dev.mysiteA.ca/acs" target="_blank">https://www.google.com/a/dev.mysiteA.ca/acs</a>"<br>
><br>
> although I am trying to access <a href="http://mail.google.com/dev.mysiteB.com" target="_blank">http://mail.google.com/dev.mysiteB.com</a><br>
><br>
> The SAML response has<br>
><br>
> <saml2p:Response Destination="<a href="https://www.google.com/a/dev.mysiteA.ca/acs" target="_blank">https://www.google.com/a/dev.mysiteA.ca/acs</a>"<br>
><br>
> instead of the secondary domain (<a href="http://dev.mysiteB.com" target="_blank">dev.mysiteB.com</a>) as well.<br>
<br>
</span>If the request from Google is incorrect you can't fix it with<br>
Shibboleth configuration. I.e., looks like you'd need to change<br>
something on their end for the requests to be correct/different.<br>
<span class="HOEnZb"><font color="#888888">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><p style="margin:0in 0in 0.0001pt"><b><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif">Andrew Cheung</span></b><br></p><p style="margin:0in 0in 0.0001pt"><font face="Arial, sans-serif">Senior Developer</font></p><p style="margin:0in 0in 0.0001pt"><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"> </span></p><p style="margin:0cm 0cm 0.0001pt"><b><span style="font-size:10pt;font-family:Arial,sans-serif">Royal LePage Real Estate Services / Brookfield Real Estate Services</span></b></p><p style="margin:0in 0in 0.0001pt"><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif">39 Wynford Drive, Toronto, ON M3C 3K5</span></p><p style="margin:0in 0in 0.0001pt"><b><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif">T</span></b><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"> 416.510.5734 <b>V</b> 415734</span></p><p style="margin:0in 0in 0.0001pt"><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif">Email: acheung</span><span lang="EN-CA"><span style="font-size:10pt;font-family:Arial,sans-serif"><a href="mailto:X@royallepage.ca" target="_blank">@b</a><a href="http://rookfieldres.com" target="_blank">rookfieldres.com</a></span></span></p><p style="margin:0in 0in 0.0001pt"><span lang="EN-CA"><a href="http://www.royallepage.ca/" target="_blank"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(17,85,204)">www.royallepage.ca</span></a></span><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"></span></p><p style="margin:0in 0in 0.0001pt"><span style="font-size:10pt;font-family:Arial,sans-serif"><a href="https://itunes.apple.com/ca/app/royal-lepage-canada/id810365559?mt=8" target="_blank">Download our iPhone App</a></span></p><p style="margin:0in 0in 0.0001pt"><br></p><p style="margin:0in 0in 0.0001pt"><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"></span></p><p style="margin:0in 0in 0.0001pt"><b><i><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif">Join Royal LePage on:</span></i></b><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"></span></p><p></p><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"><a href="https://www.facebook.com/royallepage" target="_blank"><span style="color:rgb(17,85,204)">Facebook</span></a> | </span><span lang="EN-CA"><a href="http://www.linkedin.com/company/royal-lepage" target="_blank"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(17,85,204)">LinkedIn</span></a></span><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"> | </span><span lang="EN-CA"><a href="https://twitter.com/royal_Lepage" target="_blank"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(17,85,204)">Twitter</span></a></span><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"> | </span><span lang="EN-CA"><a href="https://plus.google.com/u/0/+royallepage/posts" target="_blank"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(17,85,204)">Google+</span></a></span><span lang="EN-CA" style="font-size:10pt;font-family:Arial,sans-serif"> | <a href="http://www.pinterest.com/rlpcanada/" target="_blank"><span style="color:rgb(17,85,204)">Pinterest</span></a> | </span><span lang="EN-CA"><a href="https://www.youtube.com/user/RoyalLePageCanada" target="_blank"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(17,85,204)">YouTube</span></a></span><span lang="EN-CA"> | <a href="http://www.instagram.com/royal_lepage" target="_blank">Instagram</a></span><br></div></div>
</div>