How does OIF calculates and generates values for NotBefore and NotOnOrAfter (Doc ID 1937928.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Identity Federation - Version 11.1.1.2.0 to 11.1.2.0
Information in this document applies to any platform.

Goal

How does OIF generates the value for  NotBefore and NotOnOrAfter .  

currently, 10g /11g environments appear to be configured identically, clock drift 600 seconds, assertion validity 300 seconds

10g NotBefore current time minus 10 minutes. NotOnOrAfter current time plus 15 minutes. A time span of 25 minutes.

11g NotBefore current time exactly. NotOnOrAfter current time plus 5 minutes. A time span of 5 minutes.
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms