RE: [saml-dev] the value of AuthnInstant

> Hmm, does this qualify as errata then?

No, I think it's implementation (or at least deployment) dependent. There's
never been a rule that said how AuthnInstant was meant to be used.
Authentication is usually in the eye of the beholder.

At a minimum, it certainly wouldn't apply globally, but on a profile basis.

-- Scott