For trusted authentication to work, the time must be synchronized between Identity Server and Access Gateway and the time difference must be within one minute of each other. For Identity Server or Access Gateway Service, use YaST to verify the time settings.
If you have a Network Time Protocol server, configure the Access Manager machines to use it.
For more information, see Verifying Time Synchronization
in the NetIQ Access Manager 24.2 (v5.1) Administration Guide.