Sometimes the clocks on different servers may differ by a few seconds. As JWT uses timestamps, a variation between the JWT issuer server clock and the Integration Server clock can cause valid JWT tokens to be rejected. A Skew Mapping enables you to accommodate such clock differences up to the specified limit. Integration Server uses the Skew Mapping setting during verification of the incoming JWT.

Skew Mapping can be defined at the global level (as described in Editing Global Claim Settings) or at the issuer level (as described in Creating an Issuer Skew Mapping). The Issuer Skew Mapping value takes precedence over the Global Skew Mapping value if both values are available.