SAP Knowledge Base Article - Public

3326814 - Single Sign On login issue caused by timing mismatch in ADFS

Symptom

  • Unable to login to SuccessFactors system
  • Provisioning SSO logs show "Validate assertion fail. Subject Confirmation Data is expired: 2023-04-24T14:03:52.308Z before 2023-04-24T14:03:56.121Z"

Environment

SAP SuccessFactors HCM Suite

Cause

This error indicates a timing mismatch between Verify and ADFS.

Resolution

Our servers are synchronized with the following servers:

  • clock.via.net
  • t2.timegps.net

But any accurate time server will do. An up to date list can be found at http://support.ntp.org/bin/view/Servers/StratumOneTimeServers.

Please work with your Identity Provider (IDP) to review the setup on their side.

See Also

Microsoft Active Directory - IBM Documentation

Keywords

clock, sync, identity provider, idp, azure, microsoft, Active Directory , KBA , LOD-SF-PLT-SEL , SSO Errors & Logs , Problem

Product

SAP SuccessFactors HXM Core 2211