For details on cookie usage on our site, read our Privacy Policy
Okta Admin Authentication on HA deployment
- LIVEcommunity
- Discussions
- General Topics
- Okta Admin Authentication on HA deployment
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Okta Admin Authentication on HA deployment
- Mark as New
- Subscribe to RSS Feed
- Permalink
09-24-2018 05:07 PM
Hi,
I have configured multiple Active/Passive firewalls for Okta SSO (admin authentication) this is working as expected on the active devices, however I was planning to use a separate authentication profile for the passive devices. Everytime I push the profile for the secondary firewall it syncs it back to the primary.
It was my understanding that authentication profiles don't sync in HA (https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/high-availability/reference-ha-synch...). The devices are running 8.0.9. so I am not sure if this is expected behaviour and/or how to get around it
- Mark as New
- Subscribe to RSS Feed
- Permalink
09-26-2018 11:49 AM
Thanks for the use case, I hadn't realized it was specific to the hostname/IP. Makes it impossible to use Okta syncing like that.
It sounds like you're hitting a bug. The profiles should sync but the actual settings for the admin login shouldn't. I'd recommend getting your support case reopened if it's closed, if it's a known limitation then it should be well documented at the very least.
- Panorama LDAP Login UI in Panorama Discussions
- SAML Role Mapping in XSOAR in Cortex XSOAR Discussions
- Global protect VPN disconnecting multiple times in GlobalProtect Discussions
- Adding an External Dynamic List Object and importing the Intermediate CA certificate from the external web server that the EDL is hosted on in Next-Generation Firewall Discussions
- PA 3220 function as a secondary / sub-ca in General Topics
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
