<AccessControlProvider type="XML">
		<NOT>
			<Rule require="authnContextClassRef">urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken</Rule>
			<Rule require="valid-user" />
		</NOT>
</AccessControlProvider>
