Message Expired Exception while integrating with Shibboleth

[Emilio Penna]

a simple first thing to check: clock difference between SP and IdP?


it seems like there's almost 1 day of difference between
time informed by SP and time of the assertion ...

SP:
> The system encountered an error at Fri Jun 26 17:12:25 2015


Assertion:
<ns2:Assertion ...
IssueInstant="2015-06-25T18:40:16Z"
...
        <ns2:Conditions NotBefore="2015-06-25T18:39:46Z"
                        NotOnOrAfter="2015-06-25T18:41:46Z"
                        >

regards
Emilio

El 26/06/2015 a las 03:15 p.m., Mathi Vairaperumal escribió:
> Hi,
> 
>  
> 
> We are getting the following exceptions while integrating with
> Shibboleth. Can you please help us in resolving the issue?
> 
>  
> 
> Siteminder Assertion is returning the response with all the required
> SAML attributes. Please find attached the SAML response for the
> exception environment
> 
>  
> 
> Please let us know if you need any additional details
> 
> 
>   opensaml::SecurityPolicyException
> 
> The system encountered an error at Fri Jun 26 17:12:25 2015
> 
> To report this problem, please contact the site administrator
> at secops at coca-cola.com <mailto:secops at coca-cola.com>.
> 
> Please include the following message in any email:
> 
> *opensaml::SecurityPolicyException at
> (https://cepgdev.coke.com/Shibboleth.sso/SAML2/POST)*
> 
> Message expired, was issued too long ago.
> 
>  
> 
>  
> 
>  
> 
> *Thanks*
> 
> __________________________________________
> 
> Mathi Vairaperumal *|* *Capgemini US  LLC,***Detroit
> Custom Solutions Development
>  
> */TOGAF 8 Certified Architect /*
> */Certified Scrum Master/*
>  
> 
> */Cell: +1 248 250 0498 (Office)/*
> Cell: +1 248 767 6594 (Personal)
> mathivanan.vairaperumal at capgemini.com <http://www.capgemini.com/>
> 
> ______________________________________
> 
>  
> 
> 
> ------------------------------------------------------------------------
> 
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or entity
> to which it is addressed and may contain information that is
> confidential, privileged and exempt from disclosure under applicable
> law. If the reader of this message is not the intended recipient, you
> are hereby notified that any printing, copying, dissemination,
> distribution, disclosure or forwarding of this communication is strictly
> prohibited. If you have received this communication in error, please
> contact the sender immediately and delete it from your system. Thank You.
> 
> ------------------------------------------------------------------------
> 
> 
>