My Oracle Support Banner

Can Not Define Clock Skew When Using Oracle Web Services Manager (Doc ID 1449108.1)

Last updated on DECEMBER 16, 2022

Applies to:

Oracle Web Services Manager - Version and later
Information in this document applies to any platform.


Using WebLogic Server 10.3.3 with WebCenter and Webcenter generates the assertion. The assertion is then consumed by a WebLogic Server 10.3.2 domain that has WebLogic Portal.
SAML is used for security between portlets. The following error is experienced:

<Debug> <SecuritySAMLAtn> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <><BEA-000000> <SAMLAssertion: [Security:099031]Assertion is invalid before <TIMESTAMP>>

The following is seen in WLS Portal log:

Caused by: javax.xml.rpc.soap.SOAPFaultException: Security token failed to validate. weblogic.xml.crypto.wss.SecurityTokenValidateResult@bfb1f6[status: false]
[msg The SAML token is not valid, it is rejected by CSS ]
at oracle.portlet.wsrp.v2.soap.runtime.WSRP_v2_Markup_Binding_SOAP_Stub.getMarkup(
at oracle.portlet.wsrp.v2.WSRP_v2_Markup_PortTypeJaxbToSoap.getMarkup(
at oracle.portlet.wsrp.v2.ServerToWSRPv2.getMarkup(
at oracle.portlet.client.connection.wsrp.ActivityServerWrapper.getMarkup(
... 23 more

NTP Server has been configured, but due to latency in the network the servers might become unsynced.



To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.