SAP Knowledge Base Article - Preview

2514907 - HANA SAML SSO failed with error: Assertion is not yet valid

Symptom

SAML SSO is no longer working with SAP HANA Database and in the indexserver trace file, you see the following:

[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss d Authentication   SAMLAuthenticator.cpp(01949) : SAML assertion not yet valid (Current timestamp: YYYY-MM-DD 09:37:55.816000, assertion not valid before: yyyy-mm-ddT17:37:59.783Z) 
[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss d Authentication SAMLAuthenticator.cpp(01019) : Conditions: received assertion fragment 
<Conditions NotBefore="yyyy-mm-ddT17:37:59.783Z" NotOnOrAfter="yyyy-mm-ddT18:37:59.783Z">
    <AudienceRestriction>
        <Audience>IDP_NAME</Audience>
    </AudienceRestriction>
</Conditions>

[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss d Authentication Connection.cc(03408) : exception during authentication: ERROR [CODE-4230] Invalid SAML assertion: Assertion is not yet valid(StatusCode: , StatusMessage: )
exception 1: no.71004230 (ptime/session/eapi/jdbc/Connection.cc:3383)
    Assertion is not yet valid(StatusCode: , StatusMessage: )
NO exception throw location recorded. Stack generation suppressed.
[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss e XSSession XSSessionLifecycle.cpp(00333) : Assertion authentication for user failed with reason: Assertion is not yet valid(StatusCode: , StatusMessage: )

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.


Read more...

Environment

  • SAP HANA Database 1.0
  • SAP HANA Database 2.0

Product

SAP HANA 1.0, platform edition ; SAP HANA, platform edition 2.0

Keywords

Time Skew, Time fallback, SAML, BI, AO, BOBJ, NotBefore, NotOnOrAfter, Assertion, Condition, IdP, Identity Provider  , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.