Okta SSO Error

[ben_wang]

I get this error when I try to log in Okta. please see the debug log

Canvas thinks response is valid:
false
Validation Error:
audience http://tianjinjuilliard.instructure.com/saml2 not in allowed list of https://tianjinjuilliard.instructure.com/login/saml2
User succesfully logged into Canvas:
false