text_combined: scott cantor bqbvdn6osuedu consumption authninstant matter policy sp yes idp produces incorrect value least noninteroperable may broken depending point view point contrast opinions dont believe thing correct value think deploymentspecific use one perhaps contrived example using certificate prone caching users pin whats right timestamp last time entered pin every time key silently reused instance consider idp routinely sets issueinstant authninstant value implementation broken imho certainly doesnt violate spec stands least core one reason id changing dont think would help knowing illegal something doesnt help sp idp gets wrong think lot would get wrong think better clear sp homework relying value scott unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg tue 05 aug 2008 210918 0500 samldev value authninstant