In our SAML profile, a SAML token issued with Advice should have a NotOnOrAfter condition that does not come after the Advice token's NotOnOrAfter condition. But apparently, the CXF STS (2.7.14) doesn't consider Advice conditions when issuing a new token? If it doesn't I can add that capability in a custom ConditionsProvider, but in looking things over it's not really obvious how I can retrieve that condition from either the Advice token or from the ActAs in the request from there. I'm sure there's an easy-ish way to do this that I am missing, if someone can point me in the right direction I'd appreciate it.
Stephen W. Chappell
