IdP version 3.1.2 - NotOnOrAfter condition not being set.

[Brent Putman]

On 10/14/15 3:31 PM, Brent Putman wrote:
>
>
> On 10/14/15 3:04 PM, Alan Angulo (Office365 admin) wrote:
>>
>> I am able to authenticate and send the assertion to the SP but the
>> SP complains that the "*NotOnOrAfter*" condition is missing:
>>
>> *Information : *SAML Response is not well formed. Missing SAML 2.0
>> attribute 'NotOnOrAfter'.
>>
>>
>
> There's actually 2 NotOnOrAfter attributes in a typical SAML 2
> Assertion in a Response: 1) the bearer SubjectConfirmationData, where
> it's required 2) the Conditions, where it's optional. They don't
> mention which one they're complaining about there, but...

Actually, they do say there "the "*NotOnOrAfter*" condition", so maybe
they do mean the one on the Conditions element.  Which we do send
always, AFAIK.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151014/5b5fdd75/attachment-0001.html>