NotBefore attribute in the IdP
Cantor, Scott
cantor.2 at osu.edu
Mon Mar 18 21:28:50 EDT 2019
> You'll need to stick this in a RelyingParty element dedicated to any SP that
> would break, and as the Wiki page notes, this really isn't the right fix for the
> problem. The right fix would be to ensure that the clock doesn't drift again.
You can't fix a broken SP by managing your own clock, it's their bug. Some drift is always going to happen.
These features are there to temporarily work around simple bugs while they get fixed.
-- Scott
More information about the users
mailing list