SDDC Manager UI is inaccessible and displays: "message":"SAML assertion expired" or "message":"SAML assertion not yet valid"

Products

• VMware Cloud Foundation

Issue/Introduction

• The SDDC UI is inaccessible and displays: "message":"SAML assertion expired"
• The SDDC UI is inaccessible and displays: "message":"SAML assertion not yet valid"
  
  

Log file - /var/log/vmware/vcf/sddc-manager-ui-app/sddcManagerServer.log


####-##-##T##:##:##.###Z ERROR [f7930c7af3e74788] [services/errorHandling.js, http-post-callback, productionErrorRoute:109]
600.158: VError: Sending error response: SAML assertion expired
  at Object.errorHandlerSend (/opt/vmware/vcf/sddc-manager-ui-app/server/src/errors/VCFError.js:100:5)
  at productionErrorRoute (/opt/vmware/vcf/sddc-manager-ui-app/server/src/services/errorHandling.js:98:34)
  at Layer.handle_error (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/layer.js:71:5)
  at trim_prefix (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/index.js:310:13)
  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/index.js:280:7
  at Function.process_params (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/index.js:330:12)
  at next (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/index.js:271:10)
  at Layer.handle_error (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/layer.js:67:12)
  at trim_prefix (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/index.js:310:13)
  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/express/lib/router/index.js:280:7

 

Error Info: {"id":"d28524f2-0823-4b20-81ab-66572b907ab0","requestedPath":"/ui/api/internal/login/callback","error":{},"stack":"Error: SAML assertion expired\n  at SAML.checkTimestampsValidityError (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/passport-saml/lib/passport-saml/saml.js:831:14)\n  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/passport-saml/lib/passport-saml/saml.js:712:30\n  at _fulfilled (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:854:54)\n  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:883:30\n  at Promise.promise.promiseDispatch (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:816:13)\n  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:570:49\n  at runSingle (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:137:13)\n  at flush (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:125:13)\n  at processTicksAndRejections (node:internal/process/task_queues:78:11)","message":"SAML assertion expired","errorModule":600,"errorCode":158}

 

caused by:
Error: SAML assertion expired
  at SAML.checkTimestampsValidityError (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/passport-saml/lib/passport-saml/saml.js:831:14)
  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/passport-saml/lib/passport-saml/saml.js:712:30
  at _fulfilled (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:854:54)
  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:883:30
  at Promise.promise.promiseDispatch (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:816:13)
  at /opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:570:49
  at runSingle (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:137:13)
  at flush (/opt/vmware/vcf/sddc-manager-ui-app/server/node_modules/q/q.js:125:13)
  at processTicksAndRejections (node:internal/process/task_queues:78:11)

Environment

• VMware Cloud Foundation

Cause

• The issue is encountered due to a sync issue between the vCenter and SDDC Manager.

Resolution

• Reboot the vCenter and SDDC Manager
  
  

Additional Information

Impact/Risks:
Access to the vCenter and SDDC Manager will be lost while rebooting.