SAP Knowledge Base Article - Preview

2370802 - Issue Instant is not valid yet : SAML issue

Symptom

Configured SAML 2.0 SSO communication fails and errors similar to below are recorded in the traces:

Example scenario: When SAP NetWeaver Application Server for Java is the SP (in the default traces, below can be seen):

***********************************
SAML2Assertion validation failed [EXCEPTION]
Caused by: com.sap.security.saml2.lib.common.SAML2Exception: Issue Instant is not valid yet.
IssueInstant: Sat Mar 26 12:03:50 SGT 2 016Curent time: Sat Mar 26 12:17:02 SGT 2016

***********************************

Example scenario: When the SAP Cloud Platform Identity Authentication Service is the IDP, below can be seen:

***********************************
Identity Provider could not process the authentication request received due to client error. The message has either expired or is not yet valid. Caused by: Issue Instant is not valid yet.
***********************************


Read more...

Environment

  • Release Independent
  • SAP Cloud Platform Identity Authentication Service
  • SAP NetWeaver

Product

SAP Business Technology Platform all versions ; SAP Cloud Identity Services all versions ; SAP Composition Environment all versions ; SAP NetWeaver Application Server all versions ; SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions ; SAP Process Integration all versions ; SAP Solution Manager all versions

Keywords

UseGetTimeOfDay assertion, sso, single-sign-on, login.failed, artifact JAVA Service Provider SP Identity Provider IDP Issue Instant is not valid yet hemanth timezone difference invalid response timezone/date Network Time Protocol NTP clock synchronization -XX:+UseGetTimeOfDay gettimeofday Configtool SAP Production ABAP R/3 ERP SRM CRM ERP PPM SEM APO XI PI PORTAL Test development QA hemanth Business intelligence platform verbose class native agent libraries sapjvm_6 jre lib,RequesterStatusMessage,expected time frame, The SAML20 message has either expired or is not yet valid,SAML2Response issue instant is not valid
, KBA , BC-JAS-SEC-SML , JAVA SAML 1.1 and 2.0 , BC-SEC , Security - Read KBA 2985997 for subcomponents , BC-IAM-IDS , Identity Authentication Service , BC-SEC-LGN-SML , SAML 2.0 for ABAP , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.