The number of seconds an assertion is be valid. If not set, the profile-setting is used.
audience
multi-value, string
optional
The intended audiences for the assertion. The first element is the default. If none are stipulated, the ID of the service provider will be used as the audience
require-certificate-binding
boolean
optional
false
Set this to true to require an assertion issued to this Service Provider to include the Holder Of Key subject confirmation. When this setting is enabled and no certificate was available, an error will be returned. When disabled and no certificate was available, the Holder Of Key subject confirmation will not be included in the assertion. Note that when the profile has set this to true, this setting can not be set to false.