PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML

[MikeSangray2019]

Planning on upgrading to 10.2.x this week and noticed this release note.

Does this mean SAML is broken in this code release? Or am I reading it incorrectly?

Also, the version number looks like a firewall version number, not a GlobalProtect app version number.

Not sure what to make of this and whether GlobalProtect using SAML auth will work or not if I upgrade.

PAN-221857
Users are unable to log in to the GlobalProtect app using SAML authentication after the app is upgraded to 10.2.3-h4 and the GlobalProtect logs display the following error message: Username from SAML SSO response is different from the input..

PAN-OS 10.2.5 Known Issues (paloaltonetworks.com)

[sirons]

I also was planning on upgrading to 10.2.6 and want to know if it's safe to do so with SAML authentication.

[MikeSangray2019]

Recommendation from our SE and tech support was to upgrade to latest preferred 10.1.x and stay out of 10.2 until the bug is fixed in a future release. Check with your SE and tech support to confirm for your environment.

[sirons]

Will do, thanks for the update!