Okta Verify push notifications and FastPass authentications fail when the device time is out of sync with the Okta server time. Synchronizing the device clock with an internet time server resolves this issue. When an end-user authenticates with Okta Verify using the Push factor, the verification fails because the device does not receive the notification.
Okta Verify logs display the following error:
Authorization Error: Issued at time is invalid corresponding to the current time, Description: Authorization Error: Issued at time is invalid corresponding to the current time
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Multi-Factor Authentication (MFA)
- Okta Verify Push
- Okta Verify FastPass
This issue occurs when the device time is out of sync with the Okta server time.
When Okta requests a One-Time Password (OTP) code, the server and the device must be synchronized to ensure the generated code matches the expected code. Setting the device to automatic date and time settings ensures the device clock synchronizes with a reliable time server over the internet. This synchronization aligns the generated OTP codes with the expected codes on the Okta server.
How are the Okta Verify and FastPass authentication failures resolved?
Ensure the device has the correct time and set the time to automatic by clearing the browser cache and updating the device settings.
What are the general steps to resolve the synchronization issue?
Clear the browser cache, close the browser, and set the device time to automatic to resolve the synchronization issue.
- Set the device time to automatic.
- Clear the cache and cookies in the browser.
- Close the browser.
- Attempt the authentication again.
How is the time set to automatic on an iOS device?
Navigate to the general settings on the iOS device and configure the date and time to set automatically.
- Navigate to Settings > General > Date and Time.
- Select Set Automatically.
How is the time set to automatic on an Android device?
Navigate to the device settings on the Android device and configure the date and time to automatic.
- Navigate to Settings > Date & Time.
- Select Automatic.
How is the time set to automatic on a Windows device?
Access the Windows Control Panel to configure the Internet time settings and synchronize the device with an Internet time server.
- Open the Start menu and select Settings.
- Select Time & Language on the Settings dialog box.
- Scroll to the Related Settings section and select Additional date, time & regional settings.
- The Clock and Region screen in the Control Panel displays.
- Select Date and Time.
- Select the Internet Time tab on the Date and Time dialog box.
- Select Change settings.
- On the Internet Time Settings dialog box, select the Synchronize with an Internet Time server checkbox.
- Select a server from the dropdown menu.
- If the server is not listed, enter the name of an Internet time server.
- Select Update now.
How is the time set to automatic on a macOS device?
Access the macOS system settings to configure the date and time to be set automatically using a network time server.
- Choose the Apple menu and select System Settings.
- Select General in the sidebar, then select Date & Time on the right.
- Turn on Set time and date automatically, select Set, then enter a network time server for the region.
- Turn on Set time zone automatically using your current location.
