title: CAS azure saml2 Authentication issue instant is too old or in the future
body: <p>I have configured CAS to use a delegated saml2 authentication with Azure, it works but after a day i get this error message when i try to log in.</p>
  <pre><code>Unauthorized Access
  Either the authentication request was rejected/cancelled, or the authentication provider denied access due to permissions, etc. Review logs to find the root cause of the issue.
  </code></pre>
  <p>Looking at the logs for CAS i see this error message <code>Authentication issue instant is too old or in the future</code> i checked <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes" rel="nofollow noreferrer">Azures saml2 token lifetime documentation</a> and it says token should have max life of 1 day
  but as you can see in this log this seems to be longer then 1 day.</p>
  <pre><code>2021-11-23 11:51:31,673 WARN 2021-11-23 11:58:51,835 WARN [org.pac4j.saml.sso.impl.SAML2AuthnResponseValidator] - &lt;interval=86400,before=2021-11-23T12:03:51.835173Z,after=2021-11-22T11:53:51.835173Z,issueInstant=2021-11-16T12:33:14.319Z&gt;
  2021-11-23 11:51:31,675 ERROR [org.pac4j.saml.sso.impl.SAML2AuthnResponseValidator] - &lt;Current assertion validation failed, continue with the next one&gt;
  org.pac4j.saml.exceptions.SAMLAuthnInstantException: Authentication issue instant is too old or in the future
  </code></pre>
  <p>Right now i have set <code>cas.authn.pac4j.saml[0].maximumAuthenticationLifetime=86400</code> (1day) but i then i keep getting this error. how can i either make azure reissue a new token or get the exakt life time of the token on azure so i don't get this error message again.</p>