topic Re: Remote Access vpn authentication with SAML in SASE and Remote Access

Remote Access vpn authentication with SAML

Blason_R — Wed, 11 Oct 2023 12:20:11 GMT

Hi Team,

I am trying to configure CheckPoint CGNS Remote access VPN integration with SAML with office 365. I followed the dcument and everything works correctly however when user tries to login the portal opens -> User gets authenticated and below error appears.

I understand that means the user is not a part for VPN community but as a part of document generic* user has to be created and needs to be added in Group.

Any idea then how the user identities can be derived then?

Re: Remote Access vpn authentication with SAML

Gaurav_Pandya — Wed, 11 Oct 2023 13:44:57 GMT

Hi,

I am hoping you are using EXT_ID for SAML group in FW policy

Re: Remote Access vpn authentication with SAML

PhoneBoy — Wed, 11 Oct 2023 15:23:25 GMT

Remote Access generally requires Mobile Access and/or Harmony Endpoint licenses.
You will get this message if you're not correctly licensed.
What does cplic print say on the relevant gateway?

Re: Remote Access vpn authentication with SAML

Blason_R — Wed, 11 Oct 2023 18:04:03 GMT

Well I have eval license hence that is not the issue for sure.

@Gaurav_Pandya might be right and its not created. Which document should be followed?

Re: Remote Access vpn authentication with SAML

Gaurav_Pandya — Thu, 12 Oct 2023 12:49:41 GMT

It is sk177267

Re: Remote Access vpn authentication with SAML

Blason_R — Fri, 13 Oct 2023 13:18:30 GMT

Yes - that video really helped me setting up and now able to connect to the resources.