08-21-2020 07:37 AM
I have a VM series firewall deployed in Azure with a VPN connection to my on-prem PA firewall. I have GP working on the VM firewall via local user database but I am unable to get the VM firewall to utilize my on-prem AD server to authenticate users. I have tried adjusting the service route but this does not work for dynamic-DHCP interfaces. How do I go about accomplishing this?
08-28-2020 02:44 PM
Where is the traffic failing? Check the traffic logs to see. Might need to make additional policies to allow it.
09-22-2020 08:59 AM
I've been working on a similar problem and as we're in a hybrid Azure/O365 state, we've had to implement more infrastructure than simply authenticating AD users! To cut a long story short we've go this working using SAML authentication from our AzureAD and have a hybrid connector to sync on-prem AD with AAD
If you've got GP on your VM working then it's pretty straight forward to configure SAML for SSO, following this article worked for us;
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!