Need to increase clockSkew value for Duo OIDC Token

[Philip Smart]

> Hi,
> i try to increase the value of clockSkew to fix this error
>
> net.shibboleth.oidc.jwt.claims.JWTValidationException: JWT was rejected
> because it was issued in the future. Token issued at '2025-04-22T10:26:55Z'
> was too far away from the current tim e '2025-04-22T10:25:50.184405931Z'
> with acceptable lifetime of 'PT1M', clockSkew of 'PT1M'
>
> What is the best way to configure clockSkew value to PT2M

There should be a clockSkew property in duo-oidc.properties, idp.duo.oidc.jwt.verifier.clockSkew.


Phil

>
> BR
> JC



Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice