topic Re: Saml IDP certificate. in General Topics

Saml IDP certificate.

GideonKonga — Tue, 09 Mar 2021 07:56:54 GMT

Hi Team,

We need to integrate Saml With Global Protect .We have done the saml configuration in azure perfectly fine.We have exported the metadata file from azure and inported in PA NGFW successfully.We need to achieve through IDP certifcate but the issue is we are unable to add the IDP certificate in authentication profile in certificate for signing request.

The IDP certificate is also imported when we import the metadata file.

Re: Saml IDP certificate.

Will_Embrey — Tue, 09 Mar 2021 10:49:49 GMT

The certificate you select in the auth profile identifies the local firewall to the IDP (Azure) so you need to select a certificate you have the private key for. If you look at your certs, you need one where you have the private key, and if you dont, generate a test cert. You should then be able to select that certificate to sign the request that the firewall sends to Azure. I cant remember if you need to also upload the public cert to Azure.