<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi,</p>
<p>i have the following configuration:</p>
<p>
<blockquote type="cite"> <RequestMapper type="Native"><br>
<RequestMap applicationId="default"><br>
<Host name="<a class="moz-txt-link-abbreviated" href="http://www.fake_pippo.org">www.fake_pippo.org</a>"><br>
<Path name="secure" applicationId="pippo"/><br>
<Path name="secure2" applicationId="pippo2"/><br>
</Host><br>
</RequestMap><br>
</RequestMapper></blockquote>
<br>
<br>
<blockquote type="cite"> <ApplicationOverride id="pippo"
entityID=<a class="moz-txt-link-rfc2396E" href="https://www.fake_pippo.org/shibboleth">"https://www.fake_pippo.org/shibboleth"</a> <br>
[...]<br>
</ApplicationOverride><br>
<br>
[...]<br>
<br>
<ApplicationOverride id="pippo2"
entityID=<a class="moz-txt-link-rfc2396E" href="https://www2.fake_pippo.org/shibboleth">"https://www2.fake_pippo.org/shibboleth"</a> <br>
[...]<br>
</ApplicationOverride></blockquote>
<br>
<br>
<br>
</p>
<ul>
<li> <a class="moz-txt-link-freetext" href="http://www.fake_pippo.org/secure">http://www.fake_pippo.org/secure</a> works</li>
</ul>
<ul>
<li> <a class="moz-txt-link-freetext" href="http://www.fake_pippo.org/secure2">http://www.fake_pippo.org/secure2</a> does not work: Assertion
contains an unacceptable AudienceRestriction (the entityID of
applicationId="pippo")</li>
</ul>
<p>
<blockquote type="cite"> [...] <br>
<saml2:AudienceRestriction><br>
<saml2:Audience><a class="moz-txt-link-freetext" href="https://www.fake_pippo.org/shibboleth">https://www.fake_pippo.org/shibboleth</a></saml2:Audience><br>
</saml2:AudienceRestriction><br>
[...]</blockquote>
<br>
<br>
As far as i understand, i need to modify security-policy.xml for
the application id="pippo" in order to accept both
<a class="moz-txt-link-freetext" href="https://www.fake_pippo.org/shibboleth">https://www.fake_pippo.org/shibboleth</a> and
<a class="moz-txt-link-freetext" href="https://www2.fake_pippo.org/shibboleth">https://www2.fake_pippo.org/shibboleth</a> as Audience, but it is not
clear to me how. <br>
<br>
Any hint?<br>
<br>
Best regards,<br>
Paolo<br>
</p>
<pre class="moz-signature" cols="72">--
Paolo Veronesi
--------------------------------------------------------------
Divisione DataCenter&Cloud
Attivazione&Esercizio DC&Cloud
CUP 2000 S.c.p.A. - <a class="moz-txt-link-abbreviated" href="http://www.cup2000.it">www.cup2000.it</a>
Via del Borgo di S. Pietro, 90/c - 40126 Bologna
Tel: +39 051 4208571 | e-mail: <a class="moz-txt-link-abbreviated" href="mailto:paolo.veronesi@cup2000.it">paolo.veronesi@cup2000.it</a>
Fax +39 051 4208511
</pre>
</body>
</html>