Message expiry

Chad La Joie lajoie at
Mon Sep 5 11:34:17 BST 2011

If it's just for testing purposes you can disable the check all together.  Just looking towards the bottom of the relying-party.xml file.  You'll see the security rule that checks the message issue instant.
Chad La Joie
trusted identities, delivered

On Sep 5, 2011, at 6:14 AM, Sukesh Nischal wrote:

> To conduct a certain software test I’ve set the clock of the SP to be a week behind the IdP. However I’m getting errors such as:
> Message was expired: message issue time was '2011-08-30T09:40:52.000Z', message expired at: '2011-08-30T09:44:52.000Z', current time: '2011-09-05T10:48:32.196+01:00'
> on the IDP.  I’ve tried setting clockSkew on the SP to be 10 days, but this hasn’t helped. Is there any way to set the IDP to have a larger message lifetime?
> Regards,
> Sukesh Nischal
> --
> To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list