How to Update the SAML Certificate When Integrated with Azure AD and SAML.”

[taro1021]

Hello,

I’m using Azure AD as the Identity Provider (IdP) and GlobalProtect as the Service Provider (SP) for SSO. I’m having difficulty updating the SAML certificate.

I’ve followed these steps:

1. Issued a new SAML certificate in Azure AD.
2. Imported this new certificate into GlobalProtect.
3. Activated the new Azure AD SAML certificate in GlobalProtect.

I’m stuck and could really use some help. Thank you.

Feel free to post this on the forum to seek assistance.

After switching the SAML certificate, the following error message is known to appear.

"because the certificate in the SAML Message doesn't match the
IDP certificate configured on the IdP Server Profile".

GlobalProtect Azure 

[JayGolf]

Hi @taro1021 ,

I found this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCalCAG&lang=en_US%E2%80%A... on a similar error.