Time-synchronization issues
Horizon Workspace internally uses Security Assertion Markup Language (SAML) for authentication between the different appliances. Since SAML is very time sensitive in its nature, with its assertions having a Time To Live (TTL) of 60 seconds, there can only be a maximum time drift of 30 seconds between the different appliances. One example of a time synchronization issue is that the end users cannot sign in. The following screenshot shows the error message received when login fails:
The error message that you receive when login fails, as shown in the previous screenshot, is not very informative. In order to identify a time synchronization issue, log in to the configurator-va appliance and click on System Information. You will see the following screenshot:
The previous login issue was due to the service-va appliance not being time synchronized with the rest of the vApp appliances. This is shown very clearly on the configurator-va System Information screen (1). Correct...