SAML2STSLoginModule does not allow for configuring the ClockSkew
This can lead to authentication issues if the STS service and the STS client do not have synchronized clocks.