If the timestamp of Jenkins master is off, OpenID authentication fails with a cryptic error message of "nonce verification failed".

A bit of googling suggests that the incorrect server time setting is the most likely cause of this problem. Given that, the error message shuold improve to suggest that.

Or perhaps there can be an administrative monitor to check the timestamp in relation to a time server that the community will run.