topic Re: Identity Awareness and SAML ADFS - Error 500 in Firewall and Security Management

Identity Awareness and SAML ADFS - Error 500

gh05t — Thu, 17 Jun 2021 09:35:59 GMT

Hi!

We would like to set up Identity Awareness with on-premises Microsoft ADFS as an identity provider. Configuration was done (identity provider, authentication settings for portal, rules with roles and captive portal), but when the user enter credentials on the portal, the server return 500 error. I can't find any logs with the error or reason for this. This only happens when the user enters the correct credentials, when entering the wrong credentials, a new authorization dialog box appear.

Trying to get this to work I'm found

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170518

but no log files appear.

What could be cause of this error and how to fix it?

It's a lab environment, I try it on R80.40 and R81 with same result.

Re: Identity Awareness and SAML ADFS - Error 500

PhoneBoy — Mon, 21 Jun 2021 00:42:59 GMT

This particular one is related to DLP.
I have a feeling the 500 error is coming from the Microsoft end, not necessarily our end.
Can you attach a screenshot to confirm what is generating the 500 error?

@Royi_Priov any tips on troubleshooting this?

Re: Identity Awareness and SAML ADFS - Error 500

gh05t — Mon, 21 Jun 2021 06:18:52 GMT

I attached screenshot, it shows that error 500 returned from gateway /connect/spPortal/Login url.

ADFS already in use with other different SAML service providers and work fine. All configurations were done according to this

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/Topics-Infinity-Portal/SSO-Authorization-Microsoft-AD-FS.htm

because claim rules configuration from other manuals return error from ADFS.

Re: Identity Awareness and SAML ADFS - Error 500

Royi_Priov — Mon, 21 Jun 2021 11:21:08 GMT

Hi @gh05t,

Can you check if it happens also on Google Chrome?

Re: Identity Awareness and SAML ADFS - Error 500

gh05t — Mon, 21 Jun 2021 11:27:38 GMT

In Google Chrome I've got same error 500

Re: Identity Awareness and SAML ADFS - Error 500

Royi_Priov — Mon, 21 Jun 2021 12:31:20 GMT

Can you please debug it using sk102986?

Once the debug is ready, please open ticket with our support with the log files.

Re: Identity Awareness and SAML ADFS - Error 500

shashank — Mon, 27 Jun 2022 13:01:04 GMT

@gh05t did you find a solution to this error?

I am stuck with the same error on a similar setup.

Re: Identity Awareness and SAML ADFS - Error 500

Gaurav_Pandya — Wed, 22 Mar 2023 13:54:04 GMT

I have same error. Did you get it working?