DataCenter Object Authentication Failing

[AshleyM]

Hi,

I am setting up a connection to an Azure datacenter via a datacenter object on the management server. I am using the Azure AD User Authentication method of connection & have had a service account set up with the permissions required as shown in the guide without MFA applied to it, however when I test the connection Smartconsole shows the connection as failing due to an "Authentication Problem".

I have checked the AAD sign-in logs for that user and can see successful logins from the management server, so I am a bit confused as to why CheckPoint is showing it as failing. Is there a log file on the management server that shows the Authentication process & where it is failing?

Any suggestions on what might be happening?

Thanks

[G_W_Albrecht]

Time ? sk154952: Authentication failure when creating an AWS datacenter object even though credentials are ...

[Gil_Sudai · Accepted solution]

Which version are you using?

And in parallel, check $FWDIR/log/cloud_proxy.elg.

[AshleyM]

Thank you, after checking the cloud_proxy.elg log file I found the below: 

"Failed querying Azure, No subscriptions attached to User/Service Principal"

After checking Azure it turned out the account had been given the required permissions but had not been assigned to any Subscriptions, now it has been assigned the relevant subscriptions the connection is working.

Thanks!