Set the audience URL for SAML
task australia Updated Sep 10, 2026 1 min read t_SetTheAudienceURL.md
Enable your instance to verify that it is the intended recipient of a SAML response by using the Audience property.
Before you begin
Role required: sso_config_admin, business_rule_admin, script_include_admin
About this task
The integration verifies that each SAML response contains the same URL listed in this system property as the URL listed in the Audience element. For example:
XML
<samlp:Responsexmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="s2cdc74f37f923e26fe1aeec42b70a93d24230334f" InResponseTo="90AA6073F01567BFB0DF194F596314E2" Version="2.0" IssueInstant="2010-04-29T23:21:51Z" Destination="https://dloomac.service-now.com/navpage.do">...<saml:Conditions NotBefore="2012-01-30T19:57:10Z" NotOnOrAfter="2012-01-30T20:17:10Z"><saml:AudienceRestriction><saml:Audience>https://demoi2.service-now.com</saml:Audience></saml:AudienceRestriction></saml:Conditions>...</samlp:Response>Procedure
-
Navigate to All > SAML 2 Single Sign-on > Properties.
-
In the property The audience uri that accepts SAML2 token. (Normally, it is your instance URI. For example: https://<instance name>.service-now.com.), enter the URL of your instance.
For example, https://demoi2.service-now.com. This URL must match the value of the Audience element in the SAML Response.
-
Click Update.
46 lines · 1.9 KB
---
title: Set the audience URL for SAML
description: Enable your instance to verify that it is the intended recipient of a SAML response by using the Audience property.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/authentication/t\_SetTheAudienceURL.html
release: australia
product: Authentication
classification: authentication
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Service Provider \(SP\) system properties, SAML, Multi-Provider single sign-on \(SSO\), Authentication, Access Management]
---
# Set the audience URL for SAML
Enable your instance to verify that it is the intended recipient of a SAML response by using the Audience property.
## Before you begin
Role required: sso\_config\_admin, business\_rule\_admin, script\_include\_admin
## About this task
The integration verifies that each SAML response contains the same URL listed in this system property as the URL listed in the Audience element. For example:
```
<samlp:Responsexmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="s2cdc74f37f923e26fe1aeec42b70a93d24230334f" InResponseTo="90AA6073F01567BFB0DF194F596314E2" Version="2.0" IssueInstant="2010-04-29T23:21:51Z" Destination="https://dloomac.service-now.com/navpage.do">
...
<saml:Conditions NotBefore="2012-01-30T19:57:10Z" NotOnOrAfter="2012-01-30T20:17:10Z"><saml:AudienceRestriction><saml:Audience>https://demoi2.service-now.com</saml:Audience></saml:AudienceRestriction></saml:Conditions>
...
</samlp:Response>
```
## Procedure
1. Navigate to **All** > **SAML 2 Single Sign-on** > **Properties**.
2. In the property The audience uri that accepts SAML2 token. \(Normally, it is your instance URI. For example: https://<instance name>.service-now.com.\), enter the URL of your instance.
For example, https://demoi2.service-now.com. This URL must match the value of the Audience element in the SAML Response.
3. Click **Update**.
| title | Set the audience URL for SAML |
| description | Enable your instance to verify that it is the intended recipient of a SAML response by using the Audience property. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/platform-security/authentication/t\_SetTheAudienceURL.html |
| release | australia |
| product | Authentication |
| classification | authentication |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Service Provider \(SP\) system propertiesSAMLMulti-Provider single sign-on \(SSO\)AuthenticationAccess Management |