https://live.paloaltonetworks.com/t5/globalprotect-discussions/users-getting-authentication-error-while-accessing-gp-vpn/m-p/1221300#M6500 <P>Hello Team,</P> <P>&nbsp;</P> <P>At one of our locations, users were unable to access GP VPN due to authentication failure.</P> <P>we could see below logs on, how can we find out the root cause, was it delayed response from IDP or Firewall to NTP&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;'SAML message from IdP "<A href="https://sts.windows.net/XXXXXXXXXXXXXXX/" target="_blank">https://sts.windows.net/XXXXXXXXXXXXXXX/</A>" (server profile "SAML-AUTH") was expired already (not_on_or_after "2025-02-17T16:25:19.178Z" + max_clock_skew 300 &lt;= now Mon Feb 17 10:23:54 2025.)' )</P> Fri, 21 Feb 2025 07:34:19 GMT CSOIMGL2 2025-02-21T07:34:19Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/users-getting-authentication-error-while-accessing-gp-vpn/m-p/1221300#M6500 <P>Hello Team,</P> <P>&nbsp;</P> <P>At one of our locations, users were unable to access GP VPN due to authentication failure.</P> <P>we could see below logs on, how can we find out the root cause, was it delayed response from IDP or Firewall to NTP&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;'SAML message from IdP "<A href="https://sts.windows.net/XXXXXXXXXXXXXXX/" target="_blank">https://sts.windows.net/XXXXXXXXXXXXXXX/</A>" (server profile "SAML-AUTH") was expired already (not_on_or_after "2025-02-17T16:25:19.178Z" + max_clock_skew 300 &lt;= now Mon Feb 17 10:23:54 2025.)' )</P> Fri, 21 Feb 2025 07:34:19 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/users-getting-authentication-error-while-accessing-gp-vpn/m-p/1221300#M6500 CSOIMGL2 2025-02-21T07:34:19Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/users-getting-authentication-error-while-accessing-gp-vpn/m-p/1221587#M6503 <P>Firewall time is incorrect.</P> <P>Fix time and check that NTP is configured.</P> Fri, 21 Feb 2025 13:33:45 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/users-getting-authentication-error-while-accessing-gp-vpn/m-p/1221587#M6503 Raido_Rattameister 2025-02-21T13:33:45Z