{"action":"created","issue":{"url":"https://api.github.com/repos/pac4j/pac4j/issues/391","labels_url":"https://api.github.com/repos/pac4j/pac4j/issues/391/labels{/name}","comments_url":"https://api.github.com/repos/pac4j/pac4j/issues/391/comments","events_url":"https://api.github.com/repos/pac4j/pac4j/issues/391/events","html_url":"https://github.com/pac4j/pac4j/issues/391","id":121746414,"number":391,"title":"There seems to be a time issue with the saml auth.. Sometimes it works and sometimes it doesn't","user":{"login":"garpinc","id":1929156,"avatar_url":"https://avatars.githubusercontent.com/u/1929156?v=3","gravatar_id":"","url":"https://api.github.com/users/garpinc","html_url":"https://github.com/garpinc","followers_url":"https://api.github.com/users/garpinc/followers","following_url":"https://api.github.com/users/garpinc/following{/other_user}","gists_url":"https://api.github.com/users/garpinc/gists{/gist_id}","starred_url":"https://api.github.com/users/garpinc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garpinc/subscriptions","organizations_url":"https://api.github.com/users/garpinc/orgs","repos_url":"https://api.github.com/users/garpinc/repos","events_url":"https://api.github.com/users/garpinc/events{/privacy}","received_events_url":"https://api.github.com/users/garpinc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-12-11T16:39:57Z","updated_at":"2015-12-14T14:17:43Z","closed_at":null,"body":"I get error: Authentication issue instant is too old or in the future.\r\n\r\nSeems the root of it is this method\r\n    private boolean isIssueInstantValid(final DateTime issueInstant) {\r\n        return isDateValid(issueInstant, 0);\r\n    }\r\n\r\nI'm assuming it means either ssocircle or my computer is off but my pc is set automatically.. Seems there should be more tolerance here.\r\n\r\norg.pac4j.saml.exceptions.SAMLException: Authentication issue instant is too old or in the future\r\n\tat org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateAuthenticationStatements(SAML2DefaultResponseValidator.java:627) [pac4j-saml-1.8.2-SNAPSHOT.jar:na]\r\n\tat org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateAssertion(SAML2DefaultResponseValidator.java:393) [pac4j-saml-1.8.2-SNAPSHOT.jar:na]\r\n\tat org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateSamlSSOResponse(SAML2DefaultResponseValidator.java:302) [pac4j-saml-1.8.2-SNAPSHOT.jar:na]\r\n\tat org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validate(SAML2DefaultResponseValidator.java:150) [pac4j-saml-1.8.2-SNAPSHOT.jar:na]\r\n"},"comment":{"url":"https://api.github.com/repos/pac4j/pac4j/issues/comments/164448673","html_url":"https://github.com/pac4j/pac4j/issues/391#issuecomment-164448673","issue_url":"https://api.github.com/repos/pac4j/pac4j/issues/391","id":164448673,"user":{"login":"garpinc","id":1929156,"avatar_url":"https://avatars.githubusercontent.com/u/1929156?v=3","gravatar_id":"","url":"https://api.github.com/users/garpinc","html_url":"https://github.com/garpinc","followers_url":"https://api.github.com/users/garpinc/followers","following_url":"https://api.github.com/users/garpinc/following{/other_user}","gists_url":"https://api.github.com/users/garpinc/gists{/gist_id}","starred_url":"https://api.github.com/users/garpinc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garpinc/subscriptions","organizations_url":"https://api.github.com/users/garpinc/orgs","repos_url":"https://api.github.com/users/garpinc/repos","events_url":"https://api.github.com/users/garpinc/events{/privacy}","received_events_url":"https://api.github.com/users/garpinc/received_events","type":"User","site_admin":false},"created_at":"2015-12-14T14:17:43Z","updated_at":"2015-12-14T14:17:43Z","body":"No actually I was just using it for testing and since it came up I wanted to point out the problem as I'm sure you will get others reporting the same. (It took me hours to figure out it was timing). My clients are on okta and ping federate.."}}