SAP Knowledge Base Article - Public

3032993 - VLS Error: Failed to build Zoom JWT Tokenio.jsonwebtoken.security.WeakKeyException

Symptom

An error happens when trying to configure an instructor account using Zoom.

Validation Error

You must correct the following error(s) before proceeding:

  • The user account could not be created on VLS_ZOOM VLS Server. Please try again later or note the error and contact your VLS administrator.
    VLS Error: Failed to build Zoom JWT Tokenio.jsonwebtoken.security.WeakKeyException: The specified key byte array is 80 bits which is not secure enough for any JWT HMAC-SHA algorithm. The JWT JWA Specification (RFC 7518, Section 3.2) states that keys used with HMAC-SHA algorithms MUST have a size >= 256 bits (the key size must be greater than or equal to the hash output size). Consider using the io.jsonwebtoken.security.Keys#secretKeyFor(SignatureAlgorithm) method to create a key guaranteed to be secure enough for your preferred HMAC-SHA algorithm. See https://tools.ietf.org/html/rfc7518#section-3.2 for more information.

Environment

SAP SuccessFactors Learning

Reproducing the Issue

  1. In Learning Administration, go to People > Instructors.
  2. Search for the instructor account you want to configure and edit it.
  3. Go to the 'VLS Settings' tab.
  4. Type the e-mail address in the Account ID field and select '
  5. Click 'Apply Changes' and the error will happen.

Cause

Incorrect value configured for the <api_key> parameter in the XML file.

Resolution

  1. In Learning Administration, go to System Administration > Configuration > VLS Configuration.
  2. Edit the file for your Zoom server.
  3. Check the value between the tags <api_key>.....</api_key>
  4. Apply the correct value and save the changes.

The API key is generated using the JWT app type in the Zoom App Marketplace. If you need assistance generating this key, please contact Zoom support.

See Also

Zoom Configuration Settings

Configuring Instructors for VLS

Keywords

zoom, vls, api_key, validation error, JWT, Tokenio.jsonwebtoken.security.WeakKeyException , KBA , LOD-SF-LMS-VLS , Virtual Learning System , Problem

Product

SAP SuccessFactors Learning 2011