[WSS-522] Enforce security constraints on SAML AuthnStatement attributes

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.18, 2.0.3
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 15/Jan/15 10:17
• Updated: 09/Feb/15 10:59
• Resolved: 15/Jan/15 11:31

Description

This task is to enforce security constraints on SAML AuthnStatement attributes. Namely, make sure that an AuthnInstant isn't in the future, that the SessionNotOnOrAfter is not stale, and that the SubjectLocality IP address is valid.