Security

The 'NotBefore' condition could not be verified successfully. The SAML response is not valid

khusain_splunk
Splunk Employee
Splunk Employee

The 'NotBefore' condition could not be verified successfully. The SAML response is not valid
My IDP provider is ADFS.

Tags (2)
0 Karma
1 Solution

khusain_splunk
Splunk Employee
Splunk Employee

Hi,

It seems that splunk is rejecting the assertion from ADFS as it didn't like the "NotBefore" attribute. This may be due to clock skew between Splunk (the SP) and ADFS (the iDP). Please go through below blog link, it may help in troubleshooting:

https://blog.jstubberfield.net/splunk-saml-and-notbefore-verification/
https://answers.splunk.com/answers/350999/using-saml-for-authentication-why-do-we-get-time-s.html

Thanks
Kashif

View solution in original post

0 Karma

khusain_splunk
Splunk Employee
Splunk Employee

Hi,

It seems that splunk is rejecting the assertion from ADFS as it didn't like the "NotBefore" attribute. This may be due to clock skew between Splunk (the SP) and ADFS (the iDP). Please go through below blog link, it may help in troubleshooting:

https://blog.jstubberfield.net/splunk-saml-and-notbefore-verification/
https://answers.splunk.com/answers/350999/using-saml-for-authentication-why-do-we-get-time-s.html

Thanks
Kashif

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...