6 ms·
As a SAML service provider, what's the easiest way to tell if my implementation has this problem? I'm guessing I should: 1) Go into my Okta dev account, create
by okabat 6y ago
As a SAML service provider, what's the easiest way to tell if my implementation has this problem?
I'm guessing I should:
1) Go into my Okta dev account, create a 2nd "okta app" (SP instance) pointing at my hosted application, which should create a new entity ID
2) Start an IDP-initiated login attempt from this 2nd okta app, and verify I get an audience mismatch error
- johnmaguire2013 6y agoThis should work as long as your chosen Entity ID for your second Okta app doesn't match the actual Entity ID of your SP.