From e9a1ebff610ece1cb8caf7f8c30c0a3a0e74ba62 Mon Sep 17 00:00:00 2001 From: Steeve Beroard Date: Fri, 17 May 2019 18:15:22 +0200 Subject: [PATCH] [KEYCLOAK-8104] Keycloak SAML Adapter does not support clockSkew configuration --- securing_apps/topics.adoc | 1 + .../idp_allowedclockskew_subelement.adoc | 19 +++++++++++++++++++ 2 files changed, 20 insertions(+) create mode 100644 securing_apps/topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc diff --git a/securing_apps/topics.adoc b/securing_apps/topics.adoc index e4e0871e31..c0b82fc2ba 100644 --- a/securing_apps/topics.adoc +++ b/securing_apps/topics.adoc @@ -71,6 +71,7 @@ include::topics/saml/java/general-config/sp-keys/key_pems.adoc[] include::topics/saml/java/general-config/sp_principalname_mapping_element.adoc[] include::topics/saml/java/general-config/roleidentifiers_element.adoc[] include::topics/saml/java/general-config/idp_element.adoc[] +include::topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc[] include::topics/saml/java/general-config/idp_singlesignonservice_subelement.adoc[] include::topics/saml/java/general-config/idp_singlelogoutservice_subelement.adoc[] include::topics/saml/java/general-config/idp_keys_subelement.adoc[] diff --git a/securing_apps/topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc b/securing_apps/topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc new file mode 100644 index 0000000000..25c03ca2eb --- /dev/null +++ b/securing_apps/topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc @@ -0,0 +1,19 @@ +[[_sp-idp-allowedclockskew]] + +===== IDP AllowedClockSkew sub element + +The `AllowedClockSkew` optional sub element defines the allowed clock skew between IDP and SP. +The default value is 0. + +[source,xml] +---- +3500 +---- + +unit:: + It is possible to define the time unit attached to the value for this element. + Allowed values are MICROSECONDS, MILLISECONDS, MINUTES, NANOSECONDS and SECONDS. + This is _OPTIONAL_. + The default value is `SECONDS`. + +