Forum Discussion
Ingebrigt_Maurs
Nimbostratus
NimbostratusASSERTION_SUBJECT_CONFIRM_NOTONORAFTER not respected
Hi!
I'm using APM to implement a SAML SP.
APM will successfully validate a SAMLResponse even if the time specified by NotOnOrAfter in the SubjectConfirmationData element has passed. Shouldn't thi...
Ingebrigt_MaursNimbostratus
NimbostratusAny progress on this?
NotOnOrAfter is in there to ensure SAML tokens do not remain valid forever, so IMHO a pretty important security feature.
