<div dir="ltr">As we will soon be in the same boat, I'm also very interested in what you cook up to deal with the skew issue Russ.<div><br></div><div>Dave</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Thu, Jan 16, 2014 at 3:54 PM, Russell Beall <span dir="ltr"><<a href="mailto:beall@usc.edu" target="_blank">beall@usc.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
On Jan 16, 2014, at 1:40 PM, Michael A Grady <<a href="mailto:mgrady@unicon.net">mgrady@unicon.net</a>><br>
wrote:<br>
<br>
> Of course, the standard does explicitly state that NotBefore and NotAfter are optional, even if requested, so requiring both can easily be argued to violate the standard.<br>
<br>
Yes, and I've been trying to push this back on them. They are at least looking into the possibility of adjusting their code.<br>
<br>
> Russ, if you need any guidance, I have all the changes I made for allowing the option of removing NotBefore, every place you'd need to make a change. I'd originally, for Unicon's own purposes (the biggest use of our own IdP) "brazenly" just removed NotBefore altogether, until I made the richer change to make it configurable. I assume you'd also want to make the subtraction of a factor configurable. (I.e. just apply it to that one vendor.)<br>
<br>
That's very generous, thank you. It sounds like the code you wrote has the same purpose as the option 'includeConditionsNotBefore' found in the 2.4.0 release of the IdP. If that is the case, then I probably will try to explore expediting the upgrade to 2.4.0 rather than putting in more custom code. If your code offers a customization which readily allows a custom skew per service, I might have to get back to you on that depending on the fallout around here…<br>
<br>
Thanks again,<br>
Russ.<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>David Langenberg<div>Identity & Access Management</div><div>The University of Chicago</div>
</div>