# Jwt error in opensearch

**URL:** <https://forum.opensearch.org/t/jwt-error-in-opensearch/11982>\
**Category:** Security\
**Created:** [January 3, 2023, 3:06pm UTC](https://forum.opensearch.org/t/jwt-error-in-opensearch/11982 "2023-01-03T15:06:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![taltsafrir](https://avatars.discourse-cdn.com/v4/letter/t/a698b9/32.png) [@taltsafrir](https://forum.opensearch.org/u/taltsafrir)\
**Post date:** [January 3, 2023, 3:06pm UTC](https://forum.opensearch.org/t/jwt-error-in-opensearch/11982/1 "2023-01-03T15:06:04Z")

</div>

hi, we are using saml with okta, and after an hour we are getting this error on the servers.  
opensearch dashboard is getting 500  
**com.amazon.dlic.auth.http.jwt.keybyoidc.BadCredentialsException: The token has expired**

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/d/da63ff5c6d8540db84ea23eff4d47ef71ef9d0d8.png)

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [January 9, 2023, 3:50pm UTC](https://forum.opensearch.org/t/jwt-error-in-opensearch/11982/2 "2023-01-09T15:50:06Z")

</div>

@taltsafrir Could you share your current config.yml?

---

<div class="post-metadata">

**Author:** ![taltsafrir](https://avatars.discourse-cdn.com/v4/letter/t/a698b9/32.png) [@taltsafrir](https://forum.opensearch.org/u/taltsafrir)\
**Post date:** [January 10, 2023, 6:11pm UTC](https://forum.opensearch.org/t/jwt-error-in-opensearch/11982/3 "2023-01-10T18:11:54Z")

</div>

![Screen Shot 2023-01-10 at 20.10.24](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/e/e425df28bd9a710ce3efc7b4a224fb62572bbab2.png)

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [January 12, 2023, 2:17pm UTC](https://forum.opensearch.org/t/jwt-error-in-opensearch/11982/4 "2023-01-12T14:17:54Z")

</div>

@taltsafrir I’ve tested your config with the latest OS 2.4.1 and I get the same issue.  
The settings from opensearch\_dashboards.yml posted in the first comment are valid only for basicauth and LDAP authentication domains.

As you’ve already noticed, this issue has been already reported to the dev team.

> <https://github.com/opensearch-project/security-dashboards-plugin/issues/159>
>
> Hello, I have the same issue with the expiring session time in Kibana. However, …I have set options to keep session for 24 hours in kibana.yml
> 
> opendistro\_security.cookie.ttl: 86400000
> opendistro\_security.session.ttl: 86400000
> opendistro\_security.session.keepalive: true
> 
> Could you please help with this issue?