NotBefore condition in assertions

[d.alvarez2]

Hi,

I have a question regarding the NotBefore in the Assertion.
One of our appliations is not working because the application does require
the NotBefore and the servers (SP and IdP) are not in synch. We have tried
to set a synch between our servers but nothing works.

now, the vendor is advising we turn off option 'includeConditionsNotBefore'
(set it to false) in order to be able to authenticate and get rid of the
clock skew error that presently is happening.  THey will not work on the fix
(to allow a time window for the clock skew until 6 months from now) until
months from now. 
However, they suggest for the time being, we could turn it off and them not
require it. 
However, what are the repercussions of doing this? We could temporarily turn
it off and not send the NotBefore in the assertion, but is that something
we, as the IdP, should be concern about if we do this? 

Thank you,

Dyana



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html