SAML_NotBeforeSkewInMinutes

Explanation:

Allows up to n extra minutes in the 'not before' timestamp check on the SAML assertion. Use this setting to address clock skew between the SAML IdP machine and the Domino SAML server, if it is the case that SAML assertions received by Domino are frequently determined to be specifying a future time and therefore invalid, because the Domino server machine's time is ahead of the SAML IdP machine's time.

0 (default) - The NotBefore time in a SAML assertion received by the Domino server is honored as is.
n - Number of minutes to add to the NotBefore time in a SAML assertion received by the Domino server. This number is a positive integer (any minus sign will be ignored). This setting has a maximum of 10 minutes.

Applies to:

Servers

Default Value:

0

UI Equivalent:

None

Syntax:

SAML_NotBeforeSkewInMinutes = value

Available since:

IBM Domino 9.0.1