NotBefore condition in assertions

[Russell Beall]

It looks like I made a convincing enough argument.  And with "Severity 1" production access issues to fuel the fire, it got them in motion to fix their code.  Workday responded to the case indicating that they are developing skew windows which will be custom configurable around the NotBefore and the NotOnOrAfter dates that they receive.

So hopefully by the time you are in this boat, it will be bailed out…

To get us by until their release I might end up developing a quick workaround which will institute a delay of one or two seconds in a post-login filter, just for Workday logins of course…  That should handle it because the failure cases are only failing by a small number of milliseconds.

Regards,
Russ.

On Jan 16, 2014, at 3:04 PM, David Langenberg <davel at uchicago.edu<mailto:davel at uchicago.edu>> wrote:

As we will soon be in the same boat, I'm also very interested in what you cook up to deal with the skew issue Russ.

Dave


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140117/01f9cf13/attachment.html