<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1441111068429_3687"><span id="yui_3_16_0_1_1441111068429_3686">OK the customer corrected the audience but it still throws the same error and nothing is logged. Here is the assertion:</span></div><div id="yui_3_16_0_1_1441111068429_3685"><span><br></span></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><samlp:Response ID="_46adf1e1-0178-423d-b775-48012e997fc4" InResponseTo="_bf9c51b67a1798c5c759acbe1e094ec5" Version="2.0" IssueInstant="2015-09-01T11:17:36Z" Destination="http://shib.release.lynda.com/Shibboleth.sso/SAML2/POST" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3691"> </span><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:componentspace:SkillsServe</saml:Issuer></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3694"> </span><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3697"> </span><SignedInfo></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3700"> </span><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3703"> </span><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3706"> </span><Reference URI="#_46adf1e1-0178-423d-b775-48012e997fc4"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3709"> </span><Transforms></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3712"> </span><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3715"> </span><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3718"> </span><InclusiveNamespaces PrefixList="#default code ds kind rw saml samlp typens" xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3721"> </span></Transform></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3724"> </span></Transforms></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3727"> </span><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3730"> </span><DigestValue>q723YKUNr7G6GVbh3h2d5A1B3G8=</DigestValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3733"> </span></Reference></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3736"> </span></SignedInfo></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3739"> </span><SignatureValue>bnR1bC//jdkE2tKxgGBO8QyK02agR7Mi0HsEDOxIieGargbU0miL+UsdUw0FRbSrfpgbIWwgK9l7nO7CFaS16KK39phFNDVmTAdv+8EdXCM7CKpw2yOqxT2j5sxbjsjJ1MnEje25UOpVl+i3mB63wttuComijSUlfMW8nmBPTuxjnwGpiL3fuqHN9V1zwdqQ/Swzih/dYIE6kpIr9WGkE+TSMhZlOa6JSESch328by3PE53Bi4QTPI3rjI5a1bcY9HlD3qZLTWqCJGFj6nVo2LT8sn8Dhnnsk+DBCqmLL9rghS2gi4dsDc5QmBdq4z6vJJFlsFs6MIBmtpqc7Gc/ig==</SignatureValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3742"> </span><KeyInfo></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3745"> </span><X509Data></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3748"> </span><X509Certificate>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</X509Certificate></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3751"> </span></X509Data></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3754"> </span></KeyInfo></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3757"> </span></Signature></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3760"> </span><samlp:Status></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3763"> </span><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3766"> </span></samlp:Status></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3769"> </span><saml:Assertion Version="2.0" ID="_0b9202c7-dcc6-499d-b5b6-321f0a6e980e" IssueInstant="2015-09-01T11:17:36Z" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3772"> </span><saml:Issuer>urn:componentspace:SkillsServe</saml:Issuer></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3775"> </span><saml:Subject></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3778"> </span><saml:NameID>b9154971-fa68-4f2e-b017-a07700d8e62b</saml:NameID></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3781"> </span><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3784"> </span><saml:SubjectConfirmationData NotBefore="2015-09-01T11:17:36Z" NotOnOrAfter="2015-09-01T11:22:36Z" Recipient="http://shib.release.lynda.com/Shibboleth.sso/SAML2/POST" InResponseTo="_bf9c51b67a1798c5c759acbe1e094ec5" /></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3787"> </span></saml:SubjectConfirmation></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3790"> </span></saml:Subject></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3793"> </span><saml:Conditions NotBefore="2015-09-01T12:17:36Z" NotOnOrAfter="2015-09-01T12:22:36Z"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3796"> </span><saml:AudienceRestriction></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3799"> </span><saml:Audience>https://shib.release.lynda.com/shibboleth-sp</saml:Audience></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3802"> </span></saml:AudienceRestriction></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3805"> </span></saml:Conditions></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3808"> </span><saml:AttributeStatement></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3811"> </span><saml:Attribute Name="Email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3814"> </span><saml:AttributeValue>testuser@skillsserve.com</saml:AttributeValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3817"> </span></saml:Attribute></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3820"> </span><saml:Attribute Name="DisplayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3823"> </span><saml:AttributeValue>Test User</saml:AttributeValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3826"> </span></saml:Attribute></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3829"> </span><saml:Attribute Name="FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3832"> </span><saml:AttributeValue>Test</saml:AttributeValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3835"> </span></saml:Attribute></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3838"> </span><saml:Attribute Name="LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3841"> </span><saml:AttributeValue>User</saml:AttributeValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3844"> </span></saml:Attribute></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3847"> </span><saml:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3850"> </span><saml:AttributeValue>test.user</saml:AttributeValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3853"> </span></saml:Attribute></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3856"> </span><saml:Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3859"> </span><saml:AttributeValue>testuser@skillsserve.com</saml:AttributeValue></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3862"> </span></saml:Attribute></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3865"> </span></saml:AttributeStatement></div><div id="yui_3_16_0_1_1441111068429_3677" class=""><span class="" style="white-space:pre-wrap;" id="yui_3_16_0_1_1441111068429_3868"> </span></saml:Assertion></div><div id="yui_3_16_0_1_1441111068429_3677"></div><div id="yui_3_16_0_1_1441111068429_3677" dir="ltr" class=""></samlp:Response></div><div id="yui_3_16_0_1_1441111068429_3677" dir="ltr" class=""><br></div><div id="yui_3_16_0_1_1441111068429_3677" dir="ltr" class="">Any help greatly appreciated.</div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Courier New, courier, monaco, monospace, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Friday, August 28, 2015 8:21 AM, Mike Flynn <shibbolethlynda@yahoo.com> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv5570096689"><div><div style="color:#000;background-color:#fff;font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px;"><div id="yiv5570096689yui_3_16_0_1_1440767829872_35608"><span id="yiv5570096689yui_3_16_0_1_1440767829872_35607">Will do but I am running 2.3.1 on that box so may not be an issue in later version.</span></div> <br clear="none"><div class="yiv5570096689qtdSeparateBR"><br clear="none"><br clear="none"></div><div class="yiv5570096689yqt9184942700" id="yiv5570096689yqt23837"><div class="yiv5570096689yahoo_quoted" style="display: block;"> <div style="font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Friday, August 28, 2015 7:36 AM, "Cantor, Scott" <cantor.2@osu.edu> wrote:<br clear="none"> </font> </div> <br clear="none"><br clear="none"> <div class="yiv5570096689y_msg_container">On 8/28/15, 10:29 AM, "users on behalf of Mike Flynn" <<a rel="nofollow" shape="rect" ymailto="mailto:users-bounces@shibboleth.net" target="_blank" href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a rel="nofollow" shape="rect" ymailto="mailto:shibbolethlynda@yahoo.com" target="_blank" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br clear="none"><br clear="none">>Thanks, Scott. I think I found the issue. The saml:AudienceRestriction has<br clear="none">> my production server's value. Going to have them correct and retest.<br clear="none"><br clear="none">Surprised that didn't log, you might want to file a bug on that. It should at least note it on DEBUG if nothing else.<div class="yiv5570096689yqt5132474062" id="yiv5570096689yqtfd18951"><br clear="none"><br clear="none">-- Scott<br clear="none"><br clear="none">-- <br clear="none">To unsubscribe from this list send an email to <a rel="nofollow" shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" target="_blank" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br clear="none"></div><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>