Assertion Date Issue

[biwerr]

In the SSO Job the assertion dates conditions should take into account the timestamp of the request. In my Case the SP Server creates a Request with a Timestamp -3 Minutes from the IDP Timestamp.

So the IDP Response assertsion fails because the notBefore Timestamp is set to IDP Timestamp.

Maybe set the notBefore Timestamp to the request creation Time, like this:

Jobs/SamlSso.php#L97

->setConditions(
                (new Conditions)
                    ->setNotBefore($this->authn_request->getIssueInstantTimestamp())

[upwebdesign]

@biwerr Interesting. Have you tested this?

[biwerr]

@biwerr Interesting. Have you tested this?

Only in my Scenario, i didn't run any tests. We have only one SP, so this change works for me. I dont now if the getIssueInstantTimestamp is available on every Request. Mabye this have to be checked and an default timestamp has to be defined if the getIssueInstantTimestamp is not available.