Okta/Palo Alto Networks SAML Integration

Okta/Palo Alto Networks SAML Integration

37911
Created On 09/25/18 18:09 PM - Last Modified 06/29/20 23:47 PM


Environment
PAN-OS v 8.1 and up

Resolution

Okta has published a few SAML Applications. 

 

The Palo Alto Networks next-generation firewall can act as the service provider for the following end points:

 

  • Admin UI of Firewall/Panorama
  • Captive Portal
  • GlobalProtect Portal
  • GlobalProtect Gateway
  • Clientless SSL VPN 


(Note: When you have self signed Certificate from IDP, you won't be able to enable Validate Identity Provider Certificate. Please make sure that you are on PAN-OS 8.1.15, 9.0.9, 9.1.3 or later to mitigate exposure to https://security.paloaltonetworks.com/CVE-2020-2021).
 

http://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-CaptivePortal.html

 

http://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-GlobalProtect.html

 

http://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-Admin-UI.html

 

 



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNmCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language