topic Re: PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML in GlobalProtect Discussions

PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML

MikeSangray2019 — Mon, 27 Nov 2023 18:54:50 GMT

Planning on upgrading to 10.2.x this week and noticed this release note.

Does this mean SAML is broken in this code release? Or am I reading it incorrectly?

Also, the version number looks like a firewall version number, not a GlobalProtect app version number.

Not sure what to make of this and whether GlobalProtect using SAML auth will work or not if I upgrade.

PAN-221857
Users are unable to log in to the GlobalProtect app using SAML authentication after the app is upgraded to 10.2.3-h4 and the GlobalProtect logs display the following error message: Username from SAML SSO response is different from the input..

PAN-OS 10.2.5 Known Issues (paloaltonetworks.com)

Re: PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML

sirons — Tue, 28 Nov 2023 21:46:12 GMT

I also was planning on upgrading to 10.2.6 and want to know if it's safe to do so with SAML authentication.

Re: PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML

MikeSangray2019 — Tue, 28 Nov 2023 22:32:16 GMT

Recommendation from our SE and tech support was to upgrade to latest preferred 10.1.x and stay out of 10.2 until the bug is fixed in a future release. Check with your SE and tech support to confirm for your environment.

Re: PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML

sirons — Wed, 29 Nov 2023 14:09:20 GMT

Will do, thanks for the update!