SAMLtest Updates

[Cantor, Scott]

On 3/11/21, 2:00 AM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at signet.id> wrote:

>    A user of SAMLtest was kind enough to point out to me that a validUntil attribute is a MUST on the root
> element of metadata (333-335).

Not if it has cacheDuration, but that really depends on the trust model. The IOP model, which is the only standard use of metadata there is, assumes a short term validUntil for reasons I've documented exhaustively. But generically, no.

-- Scott