Error catalogueThe signed client assertion
Clock skew between you and the server
What it means
Assertions live at most 5 minutes; a skewed clock makes them look expired or not yet valid.
Fix
Sync your clock (NTP), including container/VM hosts.
Check it with smart-doctor
Run your login and smart-doctor ranks this cause against the others, with the evidence it found.
npx smart-doctor check my-profileAlready have the server’s error? Explain it without running anything.
npx smart-doctor explain '{"error":"invalid_client"}'