Is it possible to enable local IDP on Strata Cloud Manager ?
Question
Is it possible to enable local IDP to authenticate to Strata Cloud Manager?
Why after enabling IDP the user is seeing an error "AADSTS750054 - SAML Request or SAMLResponse must be present as query string parameters in HTTP Request for SAML Redirect Binding" when enabling Microsoft Entra ID on Strata Cloud Manager :
Environment
Strata Cloud Manager
Answer
Strata Cloud Manager supports only SP (service provider-initiated) single sign-on (SP-initiated SSO) meaning the user must go to direct SCM URL and authenticate using their local IDP.
Strata Cloud Manager doesn't support IDP initiated login (meaning the user cannot access SCM app from their IDP login page).
To resolve the error : the user must log in to stratacloudmanager.paloaltonetworks.com and authenticate using local IDP.
Additional Information
Other possible causes for the error can be checked in the Entra ID KB article : Error AADSTS750054 - SAMLRequest or SAMLResponse must be present as query string parameters in HTTP request for SAML Redirect binding
How To Enable a Third-Party Identity Provider (IdP)