{"action":"created","issue":{"url":"https://api.github.com/repos/Jasig/cas/issues/1322","labels_url":"https://api.github.com/repos/Jasig/cas/issues/1322/labels{/name}","comments_url":"https://api.github.com/repos/Jasig/cas/issues/1322/comments","events_url":"https://api.github.com/repos/Jasig/cas/issues/1322/events","html_url":"https://github.com/Jasig/cas/issues/1322","id":119544785,"number":1322,"title":"SAML2 Google Apps skewAllowance setting","user":{"login":"agaikwad","id":5182935,"avatar_url":"https://avatars.githubusercontent.com/u/5182935?v=3","gravatar_id":"","url":"https://api.github.com/users/agaikwad","html_url":"https://github.com/agaikwad","followers_url":"https://api.github.com/users/agaikwad/followers","following_url":"https://api.github.com/users/agaikwad/following{/other_user}","gists_url":"https://api.github.com/users/agaikwad/gists{/gist_id}","starred_url":"https://api.github.com/users/agaikwad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agaikwad/subscriptions","organizations_url":"https://api.github.com/users/agaikwad/orgs","repos_url":"https://api.github.com/users/agaikwad/repos","events_url":"https://api.github.com/users/agaikwad/events{/privacy}","received_events_url":"https://api.github.com/users/agaikwad/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Jasig/cas/labels/Bug","name":"Bug","color":"e11d21"},{"url":"https://api.github.com/repos/Jasig/cas/labels/Minor","name":"Minor","color":"fbca04"},{"url":"https://api.github.com/repos/Jasig/cas/labels/SAML","name":"SAML","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/Jasig/cas/milestones/19","html_url":"https://github.com/Jasig/cas/milestones/4.1.3","labels_url":"https://api.github.com/repos/Jasig/cas/milestones/19/labels","id":1418100,"number":19,"title":"4.1.3","description":"CAS 4.1.3 patch release","creator":{"login":"mmoayyed","id":1205228,"avatar_url":"https://avatars.githubusercontent.com/u/1205228?v=3","gravatar_id":"","url":"https://api.github.com/users/mmoayyed","html_url":"https://github.com/mmoayyed","followers_url":"https://api.github.com/users/mmoayyed/followers","following_url":"https://api.github.com/users/mmoayyed/following{/other_user}","gists_url":"https://api.github.com/users/mmoayyed/gists{/gist_id}","starred_url":"https://api.github.com/users/mmoayyed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmoayyed/subscriptions","organizations_url":"https://api.github.com/users/mmoayyed/orgs","repos_url":"https://api.github.com/users/mmoayyed/repos","events_url":"https://api.github.com/users/mmoayyed/events{/privacy}","received_events_url":"https://api.github.com/users/mmoayyed/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":6,"state":"open","created_at":"2015-11-18T15:03:49Z","updated_at":"2015-11-30T19:52:57Z","due_on":"2015-12-19T07:00:00Z","closed_at":null},"comments":11,"created_at":"2015-11-30T17:52:00Z","updated_at":"2015-11-30T22:14:58Z","closed_at":null,"body":"This is related to the closed issue #1266\r\nI still get the your credentials have expired. I believe it may be because the skew value is not being applied to all the dates. In CAS 3.5.1 which I have in production all NotOnOrAfter values seem to be getting skewed by a year ahead. In the below log only one of two values are getting skewed.\r\n```xml\r\n<samlp:Status>\r\n<samlp:StatusCode Value=\"urn:oasis:names:tc:SAML:2.0:status:Success\"/>\r\n</samlp:Status>\r\n<Assertion ID=\"<<skdjfskjsdfslkjlksjdlfjskd>>\" IssueInstant=\"2003-04-17T00:46:02.000Z\" Version=\"2.0\">\r\n<Issuer>https://www.opensaml.org/IDP</Issuer>\r\n<Subject>\r\n<NameID Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\"><<personDetails>></NameID>\r\n<SubjectConfirmation Method=\"urn:oasis:names:tc:SAML:2.0:cm:bearer\">\r\n<SubjectConfirmationData InResponseTo=\"<<somerandomstringlksjdlfkjsflksdjflks>>\" NotOnOrAfter=\"2015-11-24T15:39:00.000Z\" Recipient=\"https://www.google.com/a/<<mydomain>>/acs\"/>\r\n</SubjectConfirmation>\r\n</Subject>\r\n<Conditions NotBefore=\"2003-04-17T00:46:02.000Z\" NotOnOrAfter=\"2015-11-24T15:41:00.000Z\">\r\n<AudienceRestriction>\r\n<Audience>https://www.google.com/a/<<mydomain>>/acs</Audience>\r\n</AudienceRestriction>\r\n</Conditions>\r\n<AuthnStatement AuthnInstant=\"2015-11-24T15:39:00.000Z\">\r\n<AuthnContext>\r\n<AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>\r\n</AuthnContext>\r\n</AuthnStatement>\r\n</Assertion>\r\n</samlp:Response>\r\n```\r\n\r\nThanks for your help."},"comment":{"url":"https://api.github.com/repos/Jasig/cas/issues/comments/160778992","html_url":"https://github.com/Jasig/cas/issues/1322#issuecomment-160778992","issue_url":"https://api.github.com/repos/Jasig/cas/issues/1322","id":160778992,"user":{"login":"mmoayyed","id":1205228,"avatar_url":"https://avatars.githubusercontent.com/u/1205228?v=3","gravatar_id":"","url":"https://api.github.com/users/mmoayyed","html_url":"https://github.com/mmoayyed","followers_url":"https://api.github.com/users/mmoayyed/followers","following_url":"https://api.github.com/users/mmoayyed/following{/other_user}","gists_url":"https://api.github.com/users/mmoayyed/gists{/gist_id}","starred_url":"https://api.github.com/users/mmoayyed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmoayyed/subscriptions","organizations_url":"https://api.github.com/users/mmoayyed/orgs","repos_url":"https://api.github.com/users/mmoayyed/repos","events_url":"https://api.github.com/users/mmoayyed/events{/privacy}","received_events_url":"https://api.github.com/users/mmoayyed/received_events","type":"User","site_admin":false},"created_at":"2015-11-30T22:14:58Z","updated_at":"2015-11-30T22:14:58Z","body":"Your skew value must be positive. Not negative. "}}