SAP Knowledge Base Article - Preview

2370802 - Issue Instant is not valid yet : SAML issue

Symptom

Configured SAML 2.0 SSO communication fails and errors similar to below are recorded in the traces:

Example scenario: When SAP NetWeaver Application Server for Java is the SP (in the default traces, below can be seen):

***********************************
SAML2Assertion validation failed [EXCEPTION]
Caused by: com.sap.security.saml2.lib.common.SAML2Exception: Issue Instant is not valid yet.
IssueInstant: Sat Mar 26 12:03:50 SGT 2 016Curent time: Sat Mar 26 12:17:02 SGT 2016

***********************************

Example scenario: When the SAP Cloud Platform Identity Authentication Service is the IDP, below can be seen:

***********************************
Identity Provider could not process the authentication request received due to client error. The message has either expired or is not yet valid. Caused by: Issue Instant is not valid yet.
***********************************


Read more...

Environment

  • Release Independent
  • SAP Cloud Platform Identity Authentication Service
  • SAP NetWeaver

Product

SAP Cloud Platform Identity Authentication all versions ; SAP Cloud Platform all versions ; SAP Composition Environment all versions ; SAP NetWeaver Application Server all versions ; SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions ; SAP Process Integration all versions ; SAP Solution Manager all versions

Keywords

UseGetTimeOfDay assertion, sso, single-sign-on, login.failed, artifact JAVA Service Provider SP Identity Provider IDP Issue Instant is not valid yet hemanth timezone difference invalid response timezone/date Network Time Protocol NTP clock synchronization -XX:+UseGetTimeOfDay gettimeofday Configtool SAP Production ABAP R/3 ERP SRM CRM ERP PPM SEM APO XI PI PORTAL Test development QA hemanth Business intelligence platform verbose class native agent libraries sapjvm_6 jre lib
, KBA , BC-JAS-SEC-SML , JAVA SAML 1.1 and 2.0 , BC-SEC-LGN-SML , SAML 2.0 for ABAP , BC-SEC , Security , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.