What are AudienceRestrictionConditions in KentorAuthServices?

你离开我真会死。 提交于 2019-12-11 05:46:33

问题


Im working with Kentor Auth Services. Im getting an error when testing the SAML integration using Kentor Sample Idp

ID1035: The SAML Assertion did not contain any AudienceRestrictionConditions. To accept assertions without AudienceRestrictionConditions, set SecurityTokenHandlerConfiguration.AudienceRestriction.AudienceMode to AudienceUriMode.Never.

Can someone let me know why im getting this error. Also I'm seeing a field called Audience. I have left it as blank since im not sure what needs to be added there I have tried adding 'Never', but on checking the source it seems like it requires an Uri.

Can someone please let me know what needs to be given in this field?


回答1:


By default WIF/AuthServices checks the Audience restriction in the SAML response. To handle the error you need to do either of:

  • Put the EntityId of the SP in the Audience field.
  • Set spOptions.SystemIdentityModelIdentityConfiguration.AudienceRestriction.AudienceMode = AudienceUriMode.Never;.


来源:https://stackoverflow.com/questions/39867318/what-are-audiencerestrictionconditions-in-kentorauthservices

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!