Policy Rule "saml2:OneTimeUse"

[Cantor, Scott]

>> 2.       Exists there other types than "Ignore" for the Policy Rules
>> containing the "OneTimeUse" value? Unfortunately it's not explained
>> under
>> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPPolicyRule

No, there is no other context in which that QName is respected for
anything.

The documentation there is completely exhaustive.

>> 3.       How can we test the whole thing? Is it possible to include
>> the condition "OneTimeUse" in the assertions sent from an Shibboleth
>> IDP and how?

It's possible if you change the code, not otherwise.

-- Scott