OKTA SSO Activation for Panorama & FWs attached to Panorama

[Yuvaraj.Karvekar]

Hi Team, 

I am trying to activate the Okta SSO login for the Panorama & individual FWs login too via Okta.

I am having the Active Panorama login working with okta SSO. 

Somehow with same config on the passive panorama while login getting the following error message.

"Error Displaying SAML error response page" 

Same cert installed on both the Panorama . Active is working , Passive is not . 

Anything I like to check, missing please ?

Thanks & Best Regards

Yuvi

[james589goff]

---

@Yuvaraj.Karvekar wrote:

Hi Team, 

I am trying to activate the Okta SSO login for the Panorama & individual FWs login too via Okta.

I am having the Active Panorama login working with okta SSO. 

Somehow with same config on the passive panorama while login getting the following error message.

"Error Displaying SAML error response page" 

Same cert installed on both the Panorama . Active is working , Passive is not . 

Anything I like to check, missing please ?

Thanks & Best Regards

Yuvi

---

Hello @Yuvaraj.Karvekar,

It sounds like you're almost there with setting up Okta SSO for both Active and Passive Panorama! Here are a few things to check that might help resolve the issue:

1. Certificate Consistency: Ensure that the SAML certificates on both the Active and Passive Panorama are identical. Even slight differences can cause inconsistencies.

2. SAML Settings: Verify that all SAML settings, including the SAML response, are correctly configured on the Passive Panorama. Sometimes, an incomplete attribute statement can cause issues.

3. Time Sync: Ensure both active and passive devices are time-synchronized. SAML relies heavily on accurate timestamps.

4. Log Review: Check the Okta logs and Panorama system logs for detailed error messages that might give more insight into what's causing the issue.
   
   Best regards,
   James Goff