I am trying out pickup-dispatch saml web app with IS 5.9.0.[1] I created a service provider in one of my tenant. In the configs, I didn't enable Enable Audience Restriction. But once I logged in to the app, it gives the following error.
org.wso2.carbon.identity.sso.agent.exception.SSOAgentException: SAML2 Assertion Audience Restriction validation failed
org.wso2.carbon.identity.sso.agent.saml.SAML2SSOManager.validateAudienceRestriction(SAML2SSOManager.java:866)
org.wso2.carbon.identity.sso.agent.saml.SAML2SSOManager.processSSOResponse(SAML2SSOManager.java:578)
org.wso2.carbon.identity.sso.agent.saml.SAML2SSOManager.processSSOResponse(SAML2SSOManager.java:525)
org.wso2.carbon.identity.sso.agent.saml.SAML2SSOManager.processResponse(SAML2SSOManager.java:358)
org.wso2.carbon.identity.sso.agent.SAML2SSOAgentFilter.doFilter(SAML2SSOAgentFilter.java:98)
In the saml trace, following audience value can be seen.
<saml2:Conditions NotBefore="2022-04-15T16:47:15.511Z"
NotOnOrAfter="2022-04-15T16:52:15.511Z"
>
<saml2:AudienceRestriction>
<saml2:Audience>janaka1</saml2:Audience>
</saml2:AudienceRestriction>
</saml2:Conditions>
The issuer name that I used is janaka1. How to correctly configure the SP?