topic Error when I try to add the SAML Identiti Provider for Okta in General Topics

Error when I try to add the SAML Identiti Provider for Okta

MajesticSteel — Thu, 20 May 2021 16:03:45 GMT

Upload SAML IdP Failed. No IDPSSODescriptor node found. Any ideas? Here's the file I'm trying to import

<md:EntityDescriptor entityID="http://www.okta.com/exk.....">
<md:IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>
MII....
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:NameIDFormat>
urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
</md:NameIDFormat>
<md:NameIDFormat>
urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://acme.okta.com/app/panw_globalprotect/exk9.../sso/saml"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://acme.okta.com/app/panw_globalprotect/exk.../sso/saml"/>
</md:IDPSSODescriptor>
</md:EntityDescriptor>

Re: Error when I try to add the SAML Identiti Provider for Okta

S.Cantwell — Sun, 23 May 2021 18:48:39 GMT

Hello

you should be attempting to upload the xml file from Okta, IF.... the xml is correct. If that XML is incorrect, then you will errors.

Not sure that this is a PANW caused issue, but a check to confirm that the XML is accurate.

Have you been using this document?

https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-Admin-UI.html

thanks

Re: Error when I try to add the SAML Identiti Provider for Okta

MajesticSteel — Sun, 23 May 2021 19:01:56 GMT

Thanks for the reply. The xml file was not saved properly which is why it would not import. Once I right clicked and said save as xml it took the file.