Shibboleth SP Conditions Rule to assert NotBefore and NotOnOrAfter

Cantor, Scott cantor.2 at osu.edu
Thu Jan 28 16:17:38 UTC 2021


On 1/28/21, 11:13 AM, "users on behalf of Kalluru, Prasanth (ELS-LON)" <users-bounces at shibboleth.net on behalf of p.kumar.13 at elsevier.com> wrote:

>    But my Shibboleth SP still granting access even NotBefore attribute is absent in SAML response.

NotBefore being present is not a requirement of the profile.

>    Just for my testing, is there any way to disable NotOnOrAfter in my Shibboleth IdP?

No.

-- Scott




More information about the users mailing list