though maximumAuthenticationLifetime is matching, we still see tons of: 017-07-12 11:51:55,169 ERROR [org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator] - <Current assertion validation failed, continue with the next one> org.pac4j.saml.exceptions.SAMLException: Authentication issue instant is too old or in the future
ForceAuth would fix this as well ? On Wed, Jul 12, 2017 at 11:01 AM, Misagh Moayyed <[email protected]> wrote: > > > Hi Misagh, sorry if I'm disturbing you again. > > > > No such thing. > > > > This email is just to make you all aware of a bug (I think) about the > specification of a RequestedAuthnContext element of an AuthnRequest. > It seems that pac4j requires the comparisonType to permit this operation. > > > > Great. What you want to do is: > > > > 1. Submit a PR to pac4j allowing to specify the comparison type. > > 2. Submit a PR to CAS configuring a comparison type via settings. > > 3. Stop writing code :) > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: https://apereo.github.io/cas/ > Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/027601d2fb1f%24a7f31790% > 24f7d946b0%24%40unicon.net > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/027601d2fb1f%24a7f31790%24f7d946b0%24%40unicon.net?utm_medium=email&utm_source=footer> > . > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CACNfiM%2BHFg87giBEFtQ%3D16MKrd5-RTk_sfxLsEzfDbskDAjUUA%40mail.gmail.com.
