Element <OneTimeUse> and attributes "NotBefore"/"NotOnOrAfter" in SP side

[Teruaki.Ichikawa at mk.scsk.jp]

Hello,

I have installed Shibboleth SP v2.4.3 via rpm .

I tested the basic saml 2.0 federation scenario.
And I have two question.

1. <OneTimeUse> elements
I would like to have Shibboleth SP accepted SAML assertion "only once".
And I would like to refuse the assetion if it's Assertion ID is equal to the last Assertion ID.
Does Shibboleth SP accept the SAML assertion only once with default configuration ?

Referring to the following URL, I'm afraid that the OneTimeUse policy is ignored by the default conditions rule.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPPolicyRule#NativeSPPolicyRule-ConditionsRule%28Version2.2andAbove%29


2. "NotBefore" and "NotOnOrAfter"
Does Shibboleth SP verify "NotBefore" and "NotOnOrAfter" attributes if SAML assertion issued by IdP have the attributes?
How should I set up shibboleth2.xml ?

Thanks in advance,
Teruaki Ichikawa