App Control: 500 Errors When Trying to Login Via SAML

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Seeing SAML 500 error when trying to login with OKTA or another SAML Integrations
• PHPErrors.log may show error "Received an assertion that is valid in the future. Check clock synchronization on IdP and SP"

Environment

• App Control Console: All Supported Versions
• SAML

Cause

This can happen if the systems clocks are off between the SAML and App Control Server

Resolution

Confirm that the App Control Server clock matches SAML