<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top" style="font: inherit;"><div>Correcting the UTC value had no effect...</div></td></tr></table>            <div id="_origMsg_">
                <div style="font-family:arial, helvetica, sans-serif:font-size:10pt">
                    <br />
                    <div style="font-family:times new roman, new york, times, serif;font-size:12pt">
                        <font size="2" face="Tahoma">
                            <hr size="1">
                            <b>
                                <span style="font-weight:bold;">From:</span>
                            </b>
                            Brent Putman &lt;putmanb@georgetown.edu&gt;;                            <br>
                            <b>
                                <span style="font-weight:bold:">To:</span>
                            </b>
                             &lt;users@shibboleth.net&gt;;                                                                                                     <br>
                            <b>
                                <span style="font-weight:bold:">Subject:</span>
                            </b>
                            Re: IdP initiated SSO                            <br>
                            <b>
                                <span style="font-weight:bold;">Sent:</span>
                            </b>
                            Thu, Feb 7, 2013 9:45:46 PM                            <br>
                            </font>
                            <br>
                            <table cellspacing="0" cellpadding="0" border="0">
                                <tbody>
                                    <tr>
                                        <td valign="top" style="font:inherit;">The NotOnOrAfter is an optional attribute, but I'm not sure whether<BR>legally it can be present but empty.&nbsp; Semantically it is pointless to do<BR>that.<BR><BR>But the real problem, as I said in the other message, is that the SAML<BR>strucgture is just flat out wrong.<BR><BR><BR><BR><BR>On 2/7/13 4:42 PM, Mike Flynn wrote:<BR>&gt; Thanks, Marc.&nbsp; I asked them to correct that but was not sure if that<BR>&gt; was the issue based on the message.<BR>&gt;<BR>&gt; ------------------------------------------------------------------------<BR>&gt; *From:* Marc Boorshtein &lt;<a ymailto="mailto:mboorshtein@gmail.com" href="javascript:return">mboorshtein@gmail.com</a>&gt;<BR>&gt; *To:* Shib Users &lt;<a ymailto="mailto:users@shibboleth.net" href="javascript:return">users@shibboleth.net</a>&gt;<BR>&gt; *Sent:* Thursday, February 7, 2013 1:38 PM<BR>&gt; *Subject:* Re: IdP initiated
 SSO<BR>&gt;<BR>&gt; NotOnorAfter is blank...<BR>&gt;<BR>&gt; On Thu, Feb 7, 2013 at 4:35 PM, Mike Flynn &lt;<a ymailto="mailto:shibbolethlynda@yahoo.com" href="javascript:return">shibbolethlynda@yahoo.com</a><BR>&gt; &lt;mailto:<a ymailto="mailto:shibbolethlynda@yahoo.com" href="javascript:return">shibbolethlynda@yahoo.com</a>&gt;&gt; wrote:<BR>&gt; &gt; This is what was sent:<BR>&gt; &gt;<BR>&gt; &gt; &lt;saml:SubjectConfirmation<BR>&gt; &gt; Method="urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"&gt;<BR>&gt; &gt;&nbsp; &nbsp; &nbsp; &lt;saml:SubjectConfirmation<BR>&gt; &gt; Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"&gt;<BR>&gt; &gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;saml:SubjectConfirmationData NotOnOrAfter=""<BR>&gt; &gt; Recipient="<a href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target=_blank >https://shib.lynda.com/Shibboleth.sso/SAML2/POST</a>"/&gt;<BR>&gt; &gt;&nbsp; &nbsp; &nbsp; &lt;/saml:SubjectConfirmation&gt;<BR>&gt;
 &gt; &lt;/saml:SubjectConfirmation&gt;<BR>&gt; &gt;<BR><BR>--<BR>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="javascript:return">users-unsubscribe@shibboleth.net</a><BR></td>
                                    </tr>
                                </tbody>
                            </table>
                    </div>
                </div>
            </div>