Symptom
SAML SSO is no longer working with SAP HANA Database and in the indexserver trace file, you see the following:
[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss d Authentication SAMLAuthenticator.cpp(01949) : SAML assertion not yet valid (Current timestamp: YYYY-MM-DD 09:37:55.816000, assertion not valid before: yyyy-mm-ddT17:37:59.783Z)
[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss d Authentication SAMLAuthenticator.cpp(01019) : Conditions: received assertion fragment
<Conditions NotBefore="yyyy-mm-ddT17:37:59.783Z" NotOnOrAfter="yyyy-mm-ddT18:37:59.783Z">
<AudienceRestriction>
<Audience>IDP_NAME</Audience>
</AudienceRestriction>
</Conditions>
[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss d Authentication Connection.cc(03408) : exception during authentication: ERROR [CODE-4230] Invalid SAML assertion: Assertion is not yet valid(StatusCode: , StatusMessage: )
exception 1: no.71004230 (ptime/session/eapi/jdbc/Connection.cc:3383)
Assertion is not yet valid(StatusCode: , StatusMessage: )
NO exception throw location recorded. Stack generation suppressed.
[00000]{00000}[xx/-1] yyyy-mm-dd HH:MM:SS.mss e XSSession XSSessionLifecycle.cpp(00333) : Assertion authentication for user failed with reason: Assertion is not yet valid(StatusCode: , StatusMessage: )
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Read more...
Environment
- SAP HANA Database 1.0
- SAP HANA Database 2.0
Product
SAP HANA 1.0, platform edition ; SAP HANA, platform edition 2.0
Keywords
Time Skew, Time fallback, SAML, BI, AO, BOBJ, NotBefore, NotOnOrAfter, Assertion, Condition, IdP, Identity Provider , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview