topic Re: check point okta integration password expires in SASE and Remote Access

check point okta integration password expires

Daniel_Kavan — Fri, 22 Jan 2021 20:27:13 GMT

Our okta / check point integration went well until someone's password expired.

In other implementations with Okta users login with the okta login page or SSO page they see and get prompted when their password will expire. However, when users log into the Check Point SSLVPN portal, users don't see any notification that their passwords will expire soon. Users want a notification like your okta password will expire in 5 days. Please go to login.com to change it for example. Ideally, Check Point would query Okta when users log in and report back, need to change password in 5 days. RFE!

We are working on this, just wondering if any one had any ideas or comments. I will update this post on what we ended up doing.

Re: check point okta integration password expires

PhoneBoy — Sat, 23 Jan 2021 00:32:59 GMT

Are you using an integration via RADIUS or via SAML?

Re: check point okta integration password expires

Daniel_Kavan — Mon, 25 Jan 2021 13:39:38 GMT

RADIUS

Re: check point okta integration password expires

PhoneBoy — Mon, 25 Jan 2021 16:49:02 GMT

Via RADIUS, it's probably an RFE to do that.
The Mobile Access portal in R80.40+ supports SAML authentication, which would show that notification since the authentication page would be from Okta directly.

Re: check point okta integration password expires

Daniel_Kavan — Wed, 27 Jan 2021 00:54:00 GMT

Yeah...

What would be nice would be to make an API call to OKTA after the user logs in to Okta DayUntilExpire and just show that to the user after they log into the portal. One way might be to create a web application that makes an API call. RFE!