Property reference

glide.authenticate.sso.saml2.clockskew

Sets the grace period, in seconds, for SAML validity constraints to account for clock differences between the IdP and ServiceNow. The default is 180 seconds; larger values tolerate greater clock skew but values of 60 or more can weaken replay-attack protection.

Default
180
Type
string
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property defines the maximum clock skew in seconds for SAML 2.0 authentication, defaulting to 180 seconds.
What area does it affect? SAML 2.0 Authentication
What does the default mean? The default value is "180", which is the baseline setting used unless it is changed.
When should you review it? Review this property when configuring SSO or troubleshooting authentication issues.

Out of the box property record

Raw metadata from the property record.

Property name glide.authenticate.sso.saml2.clockskew
Type string
Application Global
Default value 180
Description Not stated

Sources

Official references and nearby text excerpts where this property appears.

Context preview Snippet 1
... specified time frame. If the IdP and SP clocks are significantly different, then the network latency may result in the SAML request being unauthorized. More information Attribute Description Configuration name glide.authenticate.sso.saml2.clockskew Configuration type System Properties (/sys_properties_list.do‎ Data type string Recommended value less than 60 Default value 180 Category Authentication Security risk • Severity score: 7.5 • CVSS score: High • Security ...

More in glide.authenticate

Other properties in the same namespace.

All 108 properties in glide.authenticate →