topic Re: Web Application on Mobile Access Portal with Azure AD Oauth in SASE and Remote Access

Web Application on Mobile Access Portal with Azure AD Oauth

Antonio_Martins — Thu, 16 Jul 2020 10:33:07 GMT

Hi,

I'm having trouble to deploy internal portal that authenticates against azure AD using OAuth. Client is getting this error message when redirected to authentication page:

Error: Access denied. The destination of your request has not been configured, or you do not have authorization to access it.

Reject ID: d2735b3b-510667-9e4c837c

Rejected URL: https://login.microsoftonline.com/xxxxxx.com/oauth2/authorize?scope=User.Read+User.ReadBasic.All+User.Read.All&client_id=b311f1fb-da3b-4e88-a7d4-8977c26bea68&response_type=code&redirect_uri=https://www.eportalpt.xxxxxx.com/social/complete/xxxxxx-azuread-oauth2/&state=AJ991OR26SZEhItHWSm1UVwJO5MANvOv&resource=https://graph.microsoft.com/

Thanks

Re: Web Application on Mobile Access Portal with Azure AD Oauth

PhoneBoy — Thu, 16 Jul 2020 17:23:56 GMT

Precisely which portal are you referring to?

Re: Web Application on Mobile Access Portal with Azure AD Oauth

Antonio_Martins — Fri, 17 Jul 2020 07:55:18 GMT

Mobile portal web app:

Re: Web Application on Mobile Access Portal with Azure AD Oauth

abihsot__ — Fri, 17 Jul 2020 13:54:33 GMT

do you have DNS object (if I correctly calling it) defined and allowed for the user?

Re: Web Application on Mobile Access Portal with Azure AD Oauth

Antonio_Martins — Fri, 17 Jul 2020 19:04:03 GMT

Yes I have:

Re: Web Application on Mobile Access Portal with Azure AD Oauth

abihsot__ — Tue, 21 Jul 2020 06:19:13 GMT

do you have something here? It is the old SmartDashboard

Re: Web Application on Mobile Access Portal with Azure AD Oauth

Antonio_Martins — Tue, 21 Jul 2020 10:27:09 GMT

I was translating all domains. After I've changed for internal domains only I'm able to authenticate in microsoft but after that I'm not redirected to internal URL and not portal URL.

Re: Web Application on Mobile Access Portal with Azure AD Oauth

PhoneBoy — Tue, 21 Jul 2020 19:35:39 GMT

What version of gateway?
If not R80.40, you might need to upgrade.
@AndreiR

Re: Web Application on Mobile Access Portal with Azure AD Oauth

Antonio_Martins — Wed, 22 Jul 2020 08:05:27 GMT

Gateways in R80.40.

Re: Web Application on Mobile Access Portal with Azure AD Oauth

AndreiR — Wed, 22 Jul 2020 18:22:14 GMT

@PhoneBoy , sorry, this is out of my domain.

Re: Web Application on Mobile Access Portal with Azure AD Oauth

PhoneBoy — Thu, 23 Jul 2020 04:18:20 GMT

Have you configured a SAML provider on the gateway?
This is required for Mobile Access to leverage SAML authentication.
See: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_IdentityAwareness_AdminGuide/Content/Topics-IDAG/SAML-Identity-Provider-Configuration.htm?Highlight=saml mobile access

Re: Web Application on Mobile Access Portal with Azure AD Oauth

Antonio_Martins — Thu, 23 Jul 2020 23:44:14 GMT

How can that help on Web app? SSO?

Re: Web Application on Mobile Access Portal with Azure AD Oauth

PhoneBoy — Fri, 24 Jul 2020 04:38:35 GMT

You could use it for SSO, yes.