An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time skew tolerance between a client and the domain controller clock. Whic

VMware vCenter SSO token policy uses milliseconds as the unit for the clock tolerance field, which controls the maximum acceptable time difference between the client and the domain controller clock during token validation. This fine-grained unit allows precise synchronization control to prevent replay attacks while accommodating minor drift.

Seconds is not the unit used for this field - the SSO token configuration clock tolerance value is entered in milliseconds, not seconds.

Minutes is not the unit used - the clock tolerance field in SSO token policy accepts milliseconds, not minutes.

Hours is not the unit used - the SSO token configuration clock tolerance is measured in milliseconds, not hours.