The AuthenticationTimeClaimsValidator requires a clockSkew setting to ensure small variations in OP and RP server times are accounted for e.g. authentications in the future are allowable to a certain point/skew.
A skew is already in place for the expiration window.
Environment
None
Activity
Show:
Fixed
Pinned fields
Click on the next to a field label to start pinning.
The AuthenticationTimeClaimsValidator requires a clockSkew setting to ensure small variations in OP and RP server times are accounted for e.g. authentications in the future are allowable to a certain point/skew.
A skew is already in place for the expiration window.