Survey: (IssueInstant - AuthnInstant) vs. (SP local clock time - AuthnInstant) or SP clockskew

[Cantor, Scott]

On 6/30/15, 3:56 PM, "users on behalf of Eric Goodman" <users-bounces at shibboleth.net on behalf of Eric.Goodman at ucop.edu> wrote:
>
>>The method isn't going to matter, the time is just based on when the result is recorded.
>
>Thanks, I didn't know if any external auth mechanisms keep AuthnInstants unchanged. (And wondered if it's possible for clockskew to ever leave an AuthnInstant > IssueInstant in an assertion...)

The timestamp for an External is set by the method if it wants to, so that doesn't really count.

-- Scott