Which two issues would cause these errors?

A global company’s Salesforce Identity Architect is reviewing its Salesforce production org

login history and is seeing some intermittent Security Assertion Markup Language (SAML SSO) ‘Replay Detected and Assertion Invalid’ login errors.

Which two issues would cause these errors? Choose 2 answers
A . The subject element is missing from the assertion sent to salesforce.
B . The certificate loaded into SSO configuration does not match the certificate used by the Id
D . The current time setting of the company’s identity provider (IdP) and Salesforce platform is out of sync by more than eight minutes.
E . The assertion sent to 5alesforce contains an assertion ID previously used.

Answer: A,D