Okta idp return error when sent SAML request with SAML 2.0

We have a client that use our platform and login via SSO with okta as identity provider.
recently, we improve our sso login security and move to use org.opensaml.saml.saml2.core authnRequest. The client gets error that issueInstant field day is “future date”.
Does okta knows how to handle requests from org.opensaml.saml.saml2?