3349890 - Error "Response doesn't have any valid assertion which would pass subject validation" when accessing HANA Cockpit/HANA Cockpit manager

When opening HANA Cockpit/Cockpit manager, it failed with error "Response doesn't have any valid assertion which would pass subject validation".

Checking uaa.log, found below information.

Response doesn't have any valid assertion which would pass subject validation
    at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.processAuthenticationResponse
......
Caused by: org.springframework.security.authentication.CredentialsExpiredException: Authentication statement is too old to be used with value <timestamp>

• SAP HANA Cockpit 2.0
• SAP HANA Platform Edition 2.0

SAML, SSO, Azure, Identity Provider, IdP, metadata, Authentication statement is too old, , KBA , HAN-CPT-CPT2-SEC , SAP HANA Cockpit 2 (Security) , Problem