libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

[KEYCLOAK-8104] Keycloak SAML Adapter does not support clockSkew configuration

Browse source
This commit is contained in:
Steeve Beroard 2019-05-17 18:15:22 +02:00 committed by Hynek Mlnařík
parent 9e8a8b9f66
commit e9a1ebff61
2 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
securing_apps/topics.adoc
View file

@ -71,6 +71,7 @@ include::topics/saml/java/general-config/sp-keys/key_pems.adoc[]
include::topics/saml/java/general-config/sp_principalname_mapping_element.adoc[]
include::topics/saml/java/general-config/roleidentifiers_element.adoc[]
include::topics/saml/java/general-config/idp_element.adoc[]
include::topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc[]
include::topics/saml/java/general-config/idp_singlesignonservice_subelement.adoc[]
include::topics/saml/java/general-config/idp_singlelogoutservice_subelement.adoc[]
include::topics/saml/java/general-config/idp_keys_subelement.adoc[]

19
securing_apps/topics/saml/java/general-config/idp_allowedclockskew_subelement.adoc Normal file
View file

@ -0,0 +1,19 @@
[[_sp-idp-allowedclockskew]]
===== IDP AllowedClockSkew sub element
The `AllowedClockSkew` optional sub element defines the allowed clock skew between IDP and SP.
The default value is 0.
[source,xml]
----
<AllowedClockSkew unit="MILLISECONDS">3500</AllowedClockSkew>
----
unit::
It is possible to define the time unit attached to the value for this element.
Allowed values are MICROSECONDS, MILLISECONDS, MINUTES, NANOSECONDS and SECONDS.
This is _OPTIONAL_.
The default value is `SECONDS`.