The SAML11TokenProvider and SAML20TokenProvider do not take the CLOCK_SKEW setting into account during processing.