c# verify session

[Peter Schober]

* Grunge <grungebaer at gmail.com> [2013-11-28 16:25]:
> So the Password will be resetted by a c# Services that runs on Windows.
> How can this Service check if a passed Shib_Session_ID is valid and not 
> older than 2minutes?

I think you want Shib-Authentication-Instant (not Shib_Session_ID)
which alredy is a ISO8601 datetime string. But that's part of the
subject's session (it comes from the IdP in a SAML assertion) so not
accessible by anyone/anything else by default.
-peter