Allows up to n
extra minutes in the 'not on or after' timestamp check on the SAML assertion. Use this setting to address clock skew between the SAML IdP machine and the Domino SAML server, if it is the case that SAML assertions received by Domino are frequently determined to be expired because the Domino server machine's time is behind the SAML IdP machine time.
0 (default) - The NotAfter time in a SAML assertion received by the Domino server is honored as is.
n - Number of minutes to add to the NotAfter time in a SAML assertion received by the Domino server. This number is a positive integer (any minus sign will be ignored). This setting has a maximum of 10 minutes.
SAML_NotOnOrAfterSkewInMinutes = value
IBM Domino 9.0.1