We have successfully set up SAML authentication between our server and a 3rd party service.
When the server clocks get just a little out of sync, SAML on Domino gets angry and refuses to process the request (see log entry below).
Is there a NOTE.INI parameter to increase the tolerance on the SSO token creation time checking?
“[0D34:000C-0B28] 08/01/2014 06:22:40.37 PM SECCheckAndParseSAMLResponse> Exiting : Single Sign-On token has a creation time in the future. Single Sign-On servers may need to have clocks synchronized.”