topic Re: Validation Error for Identity Provider in General Topics

Validation Error for Identity Provider

Sanjay_S — Tue, 07 Mar 2023 07:58:53 GMT

Hi All,

Last week i upgraded our MDS from R81 to R81.10, it was all successful. No major issues observed.

However i see some cosmetic error in one of our customer's domain. We are getting validation error for the identity provider created for the SAML authentication. Error says "VPN is not supported" and the other error says "Incorrect fields in SAML Service."

Though these validation errors are there i am still able to push the policy without any issues. Also i upgraded the smart Console to the latest build version 413 and i still see the same.

Did anyone come across this kind of issue post upgrade?

Regards,

Sanjay S

Re: Validation Error for Identity Provider

Chris_Atkinson — Tue, 07 Mar 2023 08:00:18 GMT

Can you please confirm which JHF take the environment is installed with currently?

Re: Validation Error for Identity Provider

Sanjay_S — Tue, 07 Mar 2023 08:36:21 GMT

Hi Chris,

It is JHF 87.

Regards,

Sanjay S

Re: Validation Error for Identity Provider

PhoneBoy — Tue, 07 Mar 2023 20:01:23 GMT

It may be you need to reapply the steps from: https://support.checkpoint.com/results/sk/sk172909

Re: Validation Error for Identity Provider

Sanjay_S — Thu, 09 Mar 2023 11:44:24 GMT

Hi PhoneBoy,

Suggesting to install the script in MDS for the domain and then Create the Identity Provider. And configure the SAML authentication. Are these steps you suggesting?

Usually if we have validation error we we will not be able to push the policy untill we fix it right?

Regards,

Sanjay S

Re: Validation Error for Identity Provider

PhoneBoy — Thu, 09 Mar 2023 18:32:25 GMT

I believe you need to run the script again (maybe not the other steps).
However, I would check this with TAC.

Re: Validation Error for Identity Provider

Sanjay_S — Tue, 04 Apr 2023 07:37:09 GMT

Hi PhoneBoy,

You heard anything from TAC on this?

Regards,

Sanjay S

Re: Validation Error for Identity Provider

PhoneBoy — Thu, 06 Apr 2023 15:03:31 GMT

You would need to open a ticket with TAC: https://help.checkpoint.com

Re: Validation Error for Identity Provider

cyberluke365 — Tue, 27 Jun 2023 11:41:46 GMT

Hello guys,

we had the exactely the same issue when migrated the Management from R81 to R81.10.

The solution is pretty simple: just add a comment in the Identity Provider Object (source: sk173707).