Brakeline: York test sign-in refused, response 'not yet valid'
Description
Early test for Saturday's depots: Leeds, Wakefield and Bradford test accounts get in. York's gets past the Microsoft page, then your page says:
The sign-in response is not yet valid.
Tried three times, same each time.
Linked issues
- relates to SUP-388 Brakeline rollout of single sign-on Done
- relates to ENG-1337 SAML response refused: NotBefore 40 s in the future (Brakeline York) Done
Comments (5)
York's responses carry a NotBefore 40 s ahead of the clock on the UK host that took them; we allowed no clock difference at all. ENG-1337: accept up to two minutes either way, and fix that host's time sync.
Found it: one of our servers in London was running 40 seconds behind, and we refused anything stamped even a second in its future. We're fixing both today. Nothing to change on your side.
ENG-1337 deployed, host clock fixed. York test sign-in passes.
York's test account gets in now. Closing; all four are ready for Thursday's rehearsal.
Thanks Priya, looking with Marek now.