Assertions are time-restricted in accordance with organization-defined identification and authentication policy.