tom scavo mkjirtzgmailcom hmm qualify errata tom feb 11 2008 1123 ari kermaier wrote would guess either idps get right sps dont check also implementers probably wonder guess difference assertion issueinstant authnstatement authninstant ari original message tom scavo mailtomkjirtzgmailcom sent thursday february 07 2008 823 pm eve maler cc saml developers subject samldev value authninstant thanks eve wasnt sure thinking loud wonder many implementations get right tom feb 7 2008 748 pm eve maler wrote t1 isnt one assertion issued time t2 another issued time t4 indicate user authenticated time t1 assuming authn session still good course eg reauthn isnt forced eve feb 7 2008 404 pm tom scavo wrote suppose user presents authnrequest idp time t0 since user security context initially idp challenges user authenticate user successfully time t1 idp issues assertion time t2 user transmits sp via browser later time t3 user presents another authnrequest idp since user already security context idp challenge user authenticate rather issues assertion time t4 user transmits sp question value authninstant second assertion thanks tom unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg eve maler 1 425 947 4522 principal engineer evemaler suncom business alliances group sun microsystems inc unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg unsubscribe email zwuiopcitsxkbbpazwlistsoasisopenorg additional commands email rnzpzqvxvvklistsoasisopenorg tue 05 aug 2008 210138 0500 samldev value authninstant