<div dir="ltr">I'm not sure if I did it right but here is my configuration<div><br></div><div><div>------------------------------------------------------</div><div><div> <bean parent="RelyingPartyByName" c:relyingPartyIds="<a href="https://nyu.employee.com">https://nyu.employee.com</a>"></div><div> <property name="profileConfigurations"></div><div> <list></div><div> <bean parent="SAML2.SSO" p:signAssertions="true" p:signResponses="false"</div><div> p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName"></div><div> <property name="additionalAudienceForAssertion"></div><div> <set></div><div> <value><a href="http://nyu.employee.com/oba/login/sso/saml">http://nyu.employee.com/oba/login/sso/saml</a></value></div><div> </set></div><div> </property></div><div> </bean></div><div> </list></div><div> </property></div><div> </bean></div></div></div><div><div>------------------------------------------------------</div></div><div><br></div><div>and here is what I got</div><div><br></div><div>------------------------------------------------------</div><div><br></div><div><div>ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception</div><div>java.lang.ClassCastException: com.google.common.collect.SingletonImmutableSet cannot be cast to java.lang.String</div><div><span class="" style="white-space:pre"> </span>at org.opensaml.saml.common.profile.impl.AddAudienceRestrictionToAssertions.addAudienceRestriction(AddAudienceRestrictionToAssertions.java:237)</div></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 29, 2015 at 3:09 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 10/29/15, 2:42 PM, "users on behalf of Yavor Yanakiev" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:yavor@nyu.edu">yavor@nyu.edu</a>> wrote:<br>
<br>
<br>
<br>
>I couldn't find an equivalent of <Audience> in the IdPv3 documentation. I also looked at the mailing list and the javadocs but no solution so far.<br>
<br>
</span>There should be a property on the profile configuration beans, additionalAudienceForAssertion.<br>
<br>
If you were using an older config, that should still work.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><font size="2"><span title="yy27" style="padding:0px;border:0px none;list-style-type:none;color:rgb(0,0,0);font-family:verdana,arial,helvetica,sans-serif;line-height:16px"><span style="padding:0px;border:0px none;list-style-type:none">Yavor Yanakiev</span> </span><br style="padding:0px;border:0px none;list-style-type:none;color:rgb(0,0,0);font-family:verdana,arial,helvetica,sans-serif;line-height:16px"><span style="padding:0px;border:0px none;list-style-type:none;color:rgb(0,0,0);font-family:verdana,arial,helvetica,sans-serif;line-height:16px">Systems Developer for Identity Services</span></font><br><div>212-992-7585<br></div></div></div>
</div>