saml-dev message

Subject: RE: [saml-dev] question on timestamp, Thank you very much !!!

From: "Cantor, Scott E." <cantor.2@osu.edu>
To: "swu@axolotl.com" <swu@axolotl.com>, "saml-dev@lists.oasis-open.org"<saml-dev@lists.oasis-open.org>
Date: Fri, 29 Apr 2011 22:14:33 +0000

> What is the reason of having both ?  and is there a precedence ? or those
> timestamps MUST be the same.

If you read the profile that you're following (presumably Browser SSO) you should find the answers. Subject confirmation is about validating "right to use" and conditions are about assertion validity, they serve different functions. If they're set to the same value, then the assertion is either short lived, which is fine, or the confirmation window is far too long.

-- Scott

References:
- question on timestamp, Thank you very much !!!
  - From: swu@axolotl.com