http://blogs.technet.com/b/askds/archive/2008/11/21/adfs-saml-tokens-and-validation-issues-when-federated-with-tfim.aspxHi all. This is Sean again and it’s ADFS blog time! Today I’m going to touch on Security Assertion Markup Language (SAML) tokens, and an issue we’ve run into when federating with Tivoli Federated Identity Manager (TFIM) . I’ll discuss what a SAML tokenen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/askds/archive/2008/11/21/adfs-saml-tokens-and-validation-issues-when-federated-with-tfim.aspx#3384657Thu, 03 Feb 2011 01:46:17 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3384657m_a_tt<p>Thank you! &nbsp;This at least gave me a starting point to find a rather poorly documented feature in ADFS 2.0. &nbsp;It&#39;s been rebranded from TokenIssuanceNotBeforeSkewInMinutes to NotBeforeSkew and no longer in web.config but set via powershell to the configuration database.</p> <p>You can skew each Relying Party Trust with the following command. &nbsp;You&#39;ll need to add the snapin...</p> <p>Add-PSSnapin microsoft.adfs.powershell</p> <p>Set-ADFSRelyingPartyTrust -TargetName &quot;MyRelyingParty&quot; -NotBeforeSkew 2</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3384657" width="1" height="1">http://blogs.technet.com/b/askds/archive/2008/11/21/adfs-saml-tokens-and-validation-issues-when-federated-with-tfim.aspx#3157624Fri, 21 Nov 2008 20:26:51 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3157624Secure Citrix Systems &raquo; Blog Archive &raquo; Ask the Directory Services Team : ADFS: SAML Tokens and Validation &#8230;<p>PingBack from <a rel="nofollow" target="_new" href="http://www.safewordfordforcitrix.com/ask-the-directory-services-team-adfs-saml-tokens-and-validation">http://www.safewordfordforcitrix.com/ask-the-directory-services-team-adfs-saml-tokens-and-validation</a></p> <img src="http://blogs.technet.com/aggbug.aspx?PostID=3157624" width="1" height="1">