SAP Knowledge Base Article - Preview

3286370 - JWT token for account is issued in the future: com.sap.core.connectivity.tunnel.client.sso.InvalidSSOTokenException

Symptom

Principal propagation fails due to clock synchronization issues and the below error is logged in the traces:

***********************************
#com.sap.core.connectivity.tunnel.client.sso.cf.JWTValidator##About to validate token expiration claims #DEBUG#com.sap.core.connectivity.tunnel.client.sso.cf.JWTValidator##com.sap.core.connectivity.tunnel.client.sso.InvalidSSOTokenException:
JWT token for account <Subaccount ID> is issued in the future.
***********************************


Read more...

Environment

  • SAP Business Technology Platform (SAP BTP)
  • SAP Cloud Connector (SCC)
  • Release Independent

Product

SAP Business Technology Platform all versions ; SAP Cloud Identity Services all versions ; SAP Composition Environment all versions ; SAP NetWeaver Application Server all versions ; SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions ; SAP Process Integration all versions ; SAP S/4HANA 2020 ; SAP Solution Manager all versions

Keywords

UseGetTimeOfDay assertion, sso, single-sign-on, login.failed, Network Time Protocol NTP clock synchronization -XX:+UseGetTimeOfDay gettimeofday Configtool SAP Production ABAP R/3 ERP SRM CRM ERP PPM SEM APO XI PI PORTAL Test development QA
, KBA , BC-CP-CON , Cloud to On-premise Connectivity service , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.