NotBefore / NotOnOrAfter from SAML1 IDP not honored by Shib SP2

[Martin Haase]

Hi team,
we have a SAML1 IdP (presumably not Shibboleth) and a 2.4.3 Shib SP.
Everything works well, except the NotBefore / NotOnOrAfter attributes.
Some security setting be the IdP's organization sets the limit to one
minute. So they issue the assertion, send it after one minute to the SP,
however, the SP does accept it. Is this a known limitation? The
NotBefore / NotOnOrAfter attributes come from the IdP enclosed in the
elements samlp:response/saml:Asserion/saml:Conditions. The SP's
clockSkew is set at 60.
Cheers,
Martin

-- 
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH                   phone:     +49 7071 407109-6
Europaplatz 3                              Fax  :     +49 7071 407109-9
D-72072 Tübingen                           email: Martin.Haase at DAASI.de
Germany                                    Web  :   http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------