Shibboleth SP Conditions Rule to assert NotBefore and NotOnOrAfter

Cantor, Scott cantor.2 at
Thu Jan 28 16:17:38 UTC 2021

On 1/28/21, 11:13 AM, "users on behalf of Kalluru, Prasanth (ELS-LON)" <users-bounces at on behalf of p.kumar.13 at> wrote:

>    But my Shibboleth SP still granting access even NotBefore attribute is absent in SAML response.

NotBefore being present is not a requirement of the profile.

>    Just for my testing, is there any way to disable NotOnOrAfter in my Shibboleth IdP?


-- Scott

More information about the users mailing list