Major Description
The ConditionsProvider receives only the appliesToAddress and lifetime when called from SAMLTokenRenewer. This is in contrast to issue operations where the full TokenProviderParameters is passed. This makes it difficult to calculate conditions based on other attributes of the request. For example, a ConditionsProvider implementation may wish to restrict renewals to a limited time period based on the AuthnInstant attribute of an AuthnStatement in the assertion being renewed.
If the full TokenRenewerParamters were passed instead then the necessary information would be available to perform more complex calculations.