IDP reports: Message was expired but times look valid

[Brent Putman]

On 11/14/13 2:03 PM, Douglas E. Engert wrote:
>
> Well then the vendor must be setting the UTC time wrong!
>
>   This is what they sent: IssueInstant="2013-11-13T10:59:26.348Z"
>   They should of sent     IssueInstant="2013-11-13T22:59:26.348Z"
>

Yes, that's correct.  Either the SP machine's time is off (or at least
was at the time of this message), or else they have some sort of code
bug around the generation of that IssueInstant value.  Based on the ACS
URL, it's not a Shibboleth SP.