topic Re: SAML Jumpcloud HA Implementation in General Topics

SAML Jumpcloud HA Implementation

DennyChanditya — Wed, 29 Jun 2022 08:56:40 GMT

Hi,

i follow the docs here LIVEcommunity - PAN-OS SAML SSO with JumpCloud and Mobile Push MFA - LIVEcommunity - 493684 (paloaltonetworks.com)

it works well with one firewall. When it used to HA active Passive Environtment, it wont work on the passive, the config sync from the active, but the configuration from Jumpcloud only setup for 1 IP Only.

is anyone here used Jumpcloud as the SAML for device login authentication? Is there other tips to work on saml auth on HA environtment?
still trying on Radius Jumpcloud too, but i still stuck in the certificate.

Re: SAML Jumpcloud HA Implementation

BPry — Wed, 29 Jun 2022 19:22:11 GMT

@DennyChanditya,

Just as an FYI, it appears that the link you put in your post is broken. I'm not familiar with JumpCloud integration, but does your management traffic for both your HA devices originate from the same public IP? Seems like it shouldn't be a problem if the request originates from the same public IP from an SSO integration standpoint.

Re: SAML Jumpcloud HA Implementation

DennyChanditya — Thu, 30 Jun 2022 02:09:29 GMT

Hello,

i think the link that i post only can be seen on partner account, our management traffic in originate from the same IP public, but in jumpcloud settings, it just one IP Configuration.

As the tutorial said in that post that fill the ACS with management interface.

So i think to create 2 profil SSO in jumpcloud, but if i create 2 profile in jumpcloud, back to Palo it only have one saml profile on authentication profile.

then i think to change the service routes for SAML, but i cant find the saml settings on the service route.

Is that possible to change the SAML service route? so i can use the public interface and setup in JC using IP Public.