Issue(s)

When federating to an external Identity Provider using SAML, you will get an error message similar to the one below.

Cause(s)

• While federating, the time instances of both systems will be compared. If both times are beyond the configured tolerance, the exception mentioned above is issued because of security reasons.

Solution

• Check the configured time on both systems and make sure they are in sync

• Increase the tolerance by adjusting the SamlTimeComparisonTolerance setting

  • COS in the role as SP: Increase the value for the setting in the GenericSamlOptions of the Identity Provider Configuration.

  • COS in the role as IDP: Increase the value for the setting in the Settings