Unable to log on to ePO on-premises using your MVISION account (zone time mismatch)

Technical Articles ID: KB94927
Last Modified: 10/14/2021

Environment

McAfee ePolicy Orchestrator (ePO) 5.x (on-premises)
McAfee MVISION Cloud Bridge (CB) extension
McAfee MVISION ePolicy Orchestrator (MVISION ePO)

Problem

You observe an issue when you try to use the Single Sign-On (SSO) feature offered by the Cloud Bridge extension.

Click the option Use your MVISION credentials to sign in:

When you try to access the MVISION ePO console from your ePO on-premises console, you see:

The console becomes unresponsive (hangs).
You’re never granted access.

The Orion log on your ePO on-premises server records the error below:

<Date/Time Stamp> ERROR [<thread number>] server.ExternalAuthenticationStrategyExtPointValve - An exception occurred invoking external authentication strategy in class com.mcafee.epo.cloudbridge.auth.IAMAuthenticationStrategyjavax.security.auth.login.FailedLoginException: jwt token was invalid:

Cause

A security token is used as part of the SSO process, which is valid for only ten minutes.

You see this issue when the time set on the ePO on-premises server doesn’t match the correct date and time for the timezone that the ePO server is set to. In this situation, the security token might be invalid because it's later than the ten-minute expiration time.

Solution

To correct the issue, accurately set the time in Microsoft Windows on your ePO on-premises server.

Related Information

See also a related article: KB94937 - Unable to Log on to ePO on-premises using your MVISION account (Microsoft Edge and Safari).

Affected Products

ePolicy Orchestrator 5.10.x
Known Issue/Product Defect
MVISION ePO

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Unable to log on to ePO on-premises using your MVISION account (zone time mismatch)

Environment

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Unable to log on to ePO on-premises using your MVISION account (zone time mismatch)

Environment

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Choose your region

Title

Title