RE: [saml-dev] Introduction & Question about the "heaviness" of S AML
>Are the minutes configurable? It's more or less unspecified. "Long enough to get it from site A to B, short enough to limit the danger." A relying site has its own policy on how long a SSO assertion should be valid. -- Scott