{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40681,"path":"platform-security/authentication/t_SetTheAudienceURL.md","title":"Set the audience URL for SAML","bundle":null,"doc_type":null,"release":"australia","body":"\n# Set the audience URL for SAML\n\nEnable your instance to verify that it is the intended recipient of a SAML response by using the Audience property.\n\n## Before you begin\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## About this task\n\nThe integration verifies that each SAML response contains the same URL listed in this system property as the URL listed in the Audience element. For example:\n\n```\n<samlp:Responsexmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\"  ID=\"s2cdc74f37f923e26fe1aeec42b70a93d24230334f\"  InResponseTo=\"90AA6073F01567BFB0DF194F596314E2\"  Version=\"2.0\"  IssueInstant=\"2010-04-29T23:21:51Z\"  Destination=\"https://dloomac.service-now.com/navpage.do\">\n...\n<saml:Conditions NotBefore=\"2012-01-30T19:57:10Z\"  NotOnOrAfter=\"2012-01-30T20:17:10Z\"><saml:AudienceRestriction><saml:Audience>https://demoi2.service-now.com</saml:Audience></saml:AudienceRestriction></saml:Conditions>\n...\n</samlp:Response>\n```\n\n## Procedure\n\n1.  Navigate to **All** &gt; **SAML 2 Single Sign-on** &gt; **Properties**.\n\n2.  In the property The audience uri that accepts SAML2 token. \\(Normally, it is your instance URI. For example: https://&lt;instance name&gt;.service-now.com.\\), enter the URL of your instance.\n\n    For example, https://demoi2.service-now.com. This URL must match the value of the Audience element in the SAML Response.\n\n3.  Click **Update**.\n\n\n"}}