Search

GlobalSCAPE Knowledge Base

Adjust clock skew between EFT and IDP server

Karla Marsh
EFT

THE INFORMATION IN THIS ARTICLE APPLIES TO:

  • EFT v7.3.3 - 7.4.13.15
  • EFT v8.0 adds advanced properties to an AdvancedProperties.json file instead of the registry. Refer to the EFT v8 help for information about editing the AdvancedProperties.json file.

DISCUSSION

EFT and Shibboleth IDP time servers can differ by 3 minutes. SAMLSSOClockSkewToleranceInMs is used to adjust the clock skew. You can adjust the setting for a more lenient clock skew (higher than 3 minutes). For example, if the EFT Server's SAMLSSOClockSkewToleranceInMs value is set it to 180000 (3 minutes), a clock difference between EFT and the IDP time server of 30 minutes results in a rejected assertion. The EFT server service must be restarted to take effect.

32-bit:

HKEY_LOCAL_MACHINE\Software\Software\Globalscape Inc.\EFT Server 7.3\

64-bit:

HKEY_LOCAL_MACHINE\Software\WOW6432Node\GlobalSCAPE Inc.\EFT Server 7.3\

Type: DWORD

Value name: SAMLSSOClockSkewToleranceInMs

Default Value: 180000

Minimum Value: 0

Maximum Value: 4294967295

Cached: yes

Backup/Restore: Yes

Restart required: Yes

Details
Last Modified: 8 Months Ago
Last Modified By: kmarsh
Type: HOWTO
Article not rated yet.
Article has been viewed 15K times.
Options
Also In This Category
Tags