Support / SUP-914
Vossberg: Okta test in staging fails with 'Audience mismatch'
Description
First test from our Okta against your staging environment. Okta says the SAML response was sent; your page says "Audience mismatch".
Linked issues
- relates to SUP-865 Vossberg: what must our Okta app send? Done
Comments (5)
Marek Nowak · 3 Jun 2026, 09:15 UTCInternal note
Their app's Audience URI is our production entity ID. Staging has its own. Nothing wrong on our side.
Clara Rossi · 3 Jun 2026, 09:30 UTC
Hi Matthias, I'm Clara, I'm planning Vossberg's move to Okta with you. The Audience URI in your Okta app is our production address; for the test it needs to be the staging one, from the sheet we sent: https://staging.id.acme-hq.example/saml/vossberg.
When we go live, you'll change it back to the production address.
Matthias Krüger · 4 Jun 2026, 14:20 UTC
Changed, test user gets in now.
Clara Rossi · 5 Jun 2026, 09:00 UTC
We see the sign-in on our side too. Closing; next is the go-live plan.
Marek, Vossberg's first Okta test fails on audience. Can you look at the response?