How does OIF calculates and generates values for NotBefore and NotOnOrAfter

(Doc ID 1937928.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Identity Federation - Version to
Information in this document applies to any platform.


How does OIF generates the value for  NotBefore and NotOnOrAfter .  

currently, 10g /11g environments appear to be configured identically, clock drift 600 seconds, assertion validity 300 seconds

10g NotBefore current time minus 10 minutes. NotOnOrAfter current time plus 15 minutes. A time span of 25 minutes.

11g NotBefore current time exactly. NotOnOrAfter current time plus 5 minutes. A time span of 5 minutes.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms