Cloud Identity Engine Discussions

Welcome to the Cloud Identity Engine Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Cloud Identity Engine Directory Sync

I have Cloud Identity Engine synced to Azure AD and see both groups and users in the hub. I configured a firewall to use CIE, but it doesn't appear to be working. I can see the groups and select them in policies, but no users from those groups are seen on the firewall. "show user cloud-identity-engine client stat" shows groups, but they show as ...

Unabel to create SAML authentication type (Azure Entra ID) - error message "Cannot save auth profile"

Hello, I'm trying to setup PAN Cloud Identity agent but I don't seem to be able to save a SAML authentication type (Azure Entra ID) as I always get the "Cannot save auth profile" error message. I tried configuring the SAML authentication type using different ways but still getting the same error. Did anyone get the same issue? Thank you.

Resolved! Cloud Identity Engine

I am trying to get my Clould Identity Engine working on my firewall. I got the CIE up and running and I am syncing my Directories with Okta. But when I try to connect my CIE to the firewall via Device->User Identification->Cloud Identity Engine. I get the following error. "cloud-identity-engine-instance is invalid" Everything looks cor...

Resolved! Which logs should to check for CIE?

Hello Team, Which logs to check to see the CIE log. I have checked less mp-log useridd.log but couldnt find.

Cloud Identity Engine - AAD

I am investigating Cloud Identity Engine for integration with Azure AD (Entra ID). I am trying to understand where CIE stores the data that it syncs from AAD (what the actual authentication flow looks like) so we can validate whether user data is going to a 3rd party provider such as Palo Alto.Also does CIE sync and cache user passwords when the...

User-ID using Cloud identity engine with Azure AD

Hello All, We are in the process of configuring the Cloud Identity Engine with the directory sync features with Azure-AD to pool the users and the groups in order to applying role/group-based access control. Despite successfully completing several steps of the configuration process, we are experiencing difficulties with the application of poli...

Cortex XDR Cloud Identity Engine

We have planned the configuration of the Cortex XDR Cloud Identity Engine for our on-premises service. Could you please tell me whether the Cloud Identity Engine agent should be installed on the AD server or on a separate (NEW) server? What is the best method?

Global protect ,Migrate from one CIE to another,

we are looking to migrate from one Cloud identity to another, is it possible to run 2 CIE simultaneous or does it have to be a bang migration process.

cortex xdr Cloud identity engine configuration query

Hello Team, We have planned Cortex XDR Cloud Identity Engine configuration for our on-premises service. Could you please provide a list of the URLs and ports that should be configured on our firewalls?

Cloud Identity Engine Group Mapping

It seems like guest users arent matching any groups with Cloud Identity Engine. We have SAML (Azure) setup for our GlobalProtect authentication (not throught Cloud Identity Engine). We have CIE configured on the firewall under user identification. The Cloud Identity Engine is configured to sync the Azure directory but if I look on the firewall u...

Cloud identity engine Azure domain SYNC is in progress

Hi Community, Good day! We have an issue with the cloud identity engine which sync is in progress for a long time in one of our azure directories. Unable to take any action like sync and sync all options. all of them are disabled. FYI: previously all domains are in sync status. Could you please advise how to solve the issue? Thanks ...

CIE Multiple Instances

Hi, I hope someone can help with this. I set up a new Cloud Identity Engine instance recently which has synced and looks good. However, I've noticed that there are two other instances that were set up under a Cortex demo licence some time ago (see attached). Is there any way I can remove the two unwanted instances without deleting the whole th...

how to view cloud identy engine logs on cortex

recenty sync cloud identity engine how to view the logs on cortex console

Directory Sync agent & Google LDAP

Is there any way to Sync Google LDAP using the Directory Sync agent? Now we've all users and groups in Google Directory and we can't integrate it with Prisma Access.

Cloud Identity Engine doesn't show all known attributes

Hi everybody, I'm wondering why Cloud Identity Engine (CIE) doesn't show all attributes, that should be synchronized from Azure AD. AAD integration is correctly done, I can see all users in CIE, but when I open user detail, not all attributes are there. When I check user attributes configuration, than it looks ok and attributes in AAD are filled...

Unlock your full community experience!

Resolved! Cloud Identity Engine

Resolved! Which logs should to check for CIE?