I tried using WSSecurityEngine.processSecurityHeader to process a SOAP message with a SAML Token. The IssueInstance was '2007-07-05T13:36:06.602-04:00'. The OpenSAML jar that is included uses java.text.SimpleDateFormat and it can not handle the ':' in the time zone. Is there a fix for this? Wes.