topic global protect with SAML SSO authentication failed in GlobalProtect Discussions

global protect with SAML SSO authentication failed

PAPAPA — Fri, 13 Dec 2024 16:47:42 GMT

after upgrading to gp client 6.2.6, we are facing authentication failed issue with few users.

user clicks to connect and then embedded browser shows error " authentication failed". log shows " Authentication failed: empty password'"

GPS logs shows the following.

:07:27:816 ----Portal Login starts----
(P6128-T9092)Debug(10551): 12/13/24 14:07:27:816 m_szSavedUserName is
(P6128-T9092)Debug(2804): 12/13/24 14:07:27:816 Failed to open file C:\Users\XXX\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_d9906756b30b9aae23ce0d67273440.dat
(P6128-T9092)Debug(10573): 12/13/24 14:07:27:816 Saml auth
(P6128-T9092)Debug(9565): 12/13/24 14:07:27:816 Return false for saml/cas auth

there is no such file " PanPUAC_ " in the folder. seems cookie is not generated.

not all users are impacted but there are few.

we are running 10.2.7-h18

#globalprotect #SSO #SAML

Re: global protect with SAML SSO authentication failed

JayGolf — Tue, 17 Dec 2024 20:44:18 GMT

Hi @PAPAPA ,

Can you try locating and removing all of the files with a ".dat" extension in the Palo Alto Networks\GlobalProtect directory and also clearing the browser cache of the affected users?

Re: global protect with SAML SSO authentication failed

PAPAPA — Tue, 07 Jan 2025 10:04:56 GMT

My excuses for delayed response. i was away.

it works some time and some time it does not work.

But here is the catch. there is one FW, when it is used as GW, users do not face this issue.

rest of the GWs have issue.