How to Update the SAML Certificate When Integrated with Azure AD and SAML.”

taro1021 — Thu, 31 Aug 2023 12:17:35 GMT

Hello,

I’m using Azure AD as the Identity Provider (IdP) and GlobalProtect as the Service Provider (SP) for SSO. I’m having difficulty updating the SAML certificate.

I’ve followed these steps:

1. Issued a new SAML certificate in Azure AD.
2. Imported this new certificate into GlobalProtect.
3. Activated the new Azure AD SAML certificate in GlobalProtect.

I’m stuck and could really use some help. Thank you.

Feel free to post this on the forum to seek assistance.

After switching the SAML certificate, the following error message is known to appear.

"because the certificate in the SAML Message doesn't match the
IDP certificate configured on the IdP Server Profile".

Re: How to Update the SAML Certificate When Integrated with Azure AD and SAML.”

JayGolf — Wed, 06 Sep 2023 17:34:28 GMT

Hi @taro1021 ,

I found this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCalCAG&lang=en_US%E2%80%A9 on a similar error.

topic Re: How to Update the SAML Certificate When Integrated with Azure AD and SAML.” in GlobalProtect Discussions

How to Update the SAML Certificate When Integrated with Azure AD and SAML.”

Re: How to Update the SAML Certificate When Integrated with Azure AD and SAML.”