Okta FastPass Authentication Error Occurs Due to Time Skew

A skewed clock causes an Okta FastPass authentication error during Okta Dashboard login. Synchronizing the device clock with a Network Time Protocol (NTP) server resolves this issue. When an end-user attempts to sign in to the Okta Dashboard, enters credentials, and utilizes the Okta FastPass factor, the following error message appears:

Something went wrong. Please try again.


 

• Okta Verify
• Windows
• Device Trust
• Okta Identity Engine (OIE)

A skewed clock invalidates the token utilized by the Okta FastPass client and Okta. Administrators can confirm this cause by checking the Okta Verify Application Event Viewer Logs. Okta generates errors similar to the following examples:

• Operation on enrollment pfdxxxxxxxxxx1t7 failed due to Okta server error: OktaWebException - Call to https://<domain>/idp/authenticators/pfdxxxxxxxxxx1t7 failed, HttpStatusCode=Unauthorized, Error='E0000011: Invalid token provided [oxxxxxxxxxxxT4g]',
• Failed to enroll device : Call to https://<domain>/idp/authenticators failed, HttpStatusCode=Unauthorized, Error='E0000011: Invalid token provided'"
• [FactorEnrollment][OktaApiWebRequest.HandleErrorResponse]: Received API error: E0000011: Invalid token provided
• AccountStateManager.InvokeTaskWithTracking: API error code InvalidToken detected
• [AccountEnrollment][OktaWebRequest.SendMessageAsync]: Call to https://<domain>/idp/authenticators failed with Unauthorized.

How is the Okta FastPass authentication error resolved?

Resolve the token mismatch by synchronizing the local device clock with an authoritative Network Time Protocol (NTP) server using the system settings for the specific operating system.

Synchronize the Windows device clock.

Synchronize the clock on Windows by navigating to the Date & Time settings and forcing an automatic synchronization.

1. Open the Start menu and select Settings.
2. Select Time & Language and choose Date & Time.
3. Turn the Set time automatically toggle to On.
4. Scroll to Additional settings and select Sync now.
   NOTE: If the system disables these options on domain-joined corporate machines, open PowerShell as an administrator and run w32tm /resync to force an NTP update.

Synchronize the macOS device clock.

Synchronize the clock on macOS by accessing the General system settings and enabling automatic time and date configuration.

1. Select the Apple Menu and open System Settings.
2. Navigate to General and choose Date & Time in the sidebar.
3. Turn the Set time and date automatically toggle to On.
4. Configure the time server to a valid pool, such as time.apple.com.

Synchronize the iOS device clock.

Synchronize the clock on iOS by navigating to the General settings and enabling the automatic time configuration.

1. Navigate to Settings, select General, and choose Date & Time.
2. Turn on Set Automatically.

Synchronize the Android device clock.

Synchronize the clock on Android by navigating to the System settings and enabling the automatic time configuration.

1. Navigate to Settings, select System, and choose Date & time.
2. Turn on Set time automatically or Use network-provided time.

How is the Okta FastPass authentication verified?

Verify the resolution by restarting the web browser and attempting the Okta FastPass authentication again.

1. Close the web browser completely.
2. Reopen the web browser.
3. Attempt to sign in using Okta FastPass.