NotBefore / NotOnOrAfter from SAML1 IDP not honored by Shib SP2

[Cantor, Scott]

On 4/2/12 11:04 AM, "Martin Haase" <martin.haase at daasi.de> wrote:
>Is one hour extreme enough? They said it accepted the response even then.

Then I would have to claim they've altered the configuration to omit the
condition checking, but I can do a verification if a bug is filed.

>Can the IssueInstant check be influenced anyhow?

Turned off, yes, or the allowed delta altered.

>...of course one could let the application check the
>shib-authentication-instant, but that's an ugly workaround...

That isn't relevant, that's a completely different value.

-- Scott