diff --git a/.changeset/lazy-apples-scream.md b/.changeset/lazy-apples-scream.md
new file mode 100644
index 0000000000..b666c3498a
--- /dev/null
+++ b/.changeset/lazy-apples-scream.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Allow to configure SAML auth `acceptedClockSkewMs`
diff --git a/plugins/auth-backend/config.d.ts b/plugins/auth-backend/config.d.ts
index e9f24382d9..ed6417850c 100644
--- a/plugins/auth-backend/config.d.ts
+++ b/plugins/auth-backend/config.d.ts
@@ -53,6 +53,7 @@ export interface Config {
         decryptionPvk?: string;
         signatureAlgorithm?: 'sha256' | 'sha512';
         digestAlgorithm?: string;
+        acceptedClockSkewMs?: number;
       };
       okta?: {
         [authEnv: string]: { [key: string]: string };
diff --git a/plugins/auth-backend/src/providers/saml/provider.ts b/plugins/auth-backend/src/providers/saml/provider.ts
index fa8519ea1a..fe721fa376 100644
--- a/plugins/auth-backend/src/providers/saml/provider.ts
+++ b/plugins/auth-backend/src/providers/saml/provider.ts
@@ -132,6 +132,7 @@ export const createSamlProvider = (
         | SignatureAlgorithm
         | undefined,
       digestAlgorithm: config.getOptionalString('digestAlgorithm'),
+      acceptedClockSkewMs: config.getOptionalNumber('acceptedClockSkewMs'),
 
       tokenIssuer,
       appUrl: globalConfig.appUrl,