Palo Alto Admin UI SAML authentication failures

N.Portilla — Thu, 02 Jan 2025 17:37:35 GMT

A few months ago, a failure occurred with SAML authentication configured between Azure and Palo Alto for firewall management. It is believed to have arisen from a flaw that occurred with Microsoft in late October and early November.

The issue is that the SSO works in even takes you to Microsoft authentication with their MFA and such and it redirects to the ACS URL (https://my ip:443/SP/ACS) and shows that the page was not found with a 404 error. Tried reloading the configuration or the XML with the metadata to Palo Alto but still the same problem. Created a new SAML auth and authentication profile, but everything remains the same. From the Azure side it is seen that the authentication is allowed as well as the MFA validation with the mobile app used for it and following the Microsoft and Palo Alto documentation, the configuration is correct. The reason for the failure is unknown and from the Palo Alto side the traces are limited, only the client redirection to the Microsoft URL for validation via SAML is seen.

Translated with DeepL.com (free version).

Does anybody know about this problem? The firmware in Palo Alto is 11.1.4-h1

topic Palo Alto Admin UI SAML authentication failures in Next-Generation Firewall Discussions

Palo Alto Admin UI SAML authentication failures