[JIRA] (JENKINS-54275) (Google Apps/SAML) org.pac4j.saml.exceptions.SAMLException: Authentication issue instant is too old

[jonas.liljestr...@hemnet.se (JIRA)]

Title: Message Title

Jonas Liljestrand commented on JENKINS-54275   Re: (Google Apps/SAML) org.pac4j.saml.exceptions.SAMLException: Authentication issue instant is too old Hi, Me and my team is also facing this issue, we do not use HTTP-POST binding but can see the same issue in the log. Below I provide the same log output but with some more details on the dates   Oct 29, 2018 11:20:28 AM FINEST org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator isDateValid interval=86400,before=2018-10-29T11:22:28.841Z,after=2018-10-28T11:18:28.841Z,issueInstant=2018-10-25T14:39:22.000Z Oct 29, 2018 11:20:28 AM SEVERE org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator validateSamlSSOResponse Current assertion validation failed, continue with the next one org.pac4j.saml.exceptions.SAMLException: Authentication issue instant is too old or in the future at org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateAuthenticationStatements(SAML2DefaultResponseValidator.java:620) at org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateAssertion(SAML2DefaultResponseValidator.java:393) at org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validateSamlSSOResponse(SAML2DefaultResponseValidator.java:302) at org.pac4j.saml.sso.impl.SAML2DefaultResponseValidator.validate(SAML2DefaultResponseValidator.java:138) at org.pac4j.saml.sso.impl.SAML2WebSSOMessageReceiver.receiveMessage(SAML2WebSSOMessageReceiver.java:77) at org.pac4j.saml.sso.impl.SAML2WebSSOProfileHandler.receive(SAML2WebSSOProfileHandler.java:35) Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.