09-22-2021 07:26 AM
I have a question about the Common Name used on the cert for Panorama SAML login with Okta. Palo is not allowing self-signed cert for SAML anymore and requires the cert to be signed by a 3rd part CA. I need help understanding what Common Name to use in the CSR, CA vendors require an external FQDN be used but this is for Panorama Admins and is not externally accessible. Link below to the CVE-2020-2021 bulletin from Okta/Palo Alto.
I have a ticket open with TAC, Okta, and DigiCert, but so far we haven't made any progress. Maybe someone here can shed light? Thanks in advance!!!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
