"Replay detected of message" causes

[Nate Klingenstein]

And the but it didn't error out for me...

"This is a DateTime string with a UTC value and round-trip format
("o"). Azure AD expects a DateTime value of this type, but does not
evaluate or use the value."

I'm not trying to pick on Azure here.  They just have the best documentation.

https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-single-sign-on-protocol-reference