SSO Wesite blocked

[ShadowNif]

Hello,

I am having an issue with my Identity Agent SSO login. I have an independent Identity Awareness firewall, and I activated Browser-Based Authentication.

Interestingly, the portal under Access Settings — https://<MyGateway>/connect — works fine.

However, under Authentication, the Browser Transparent Single Sign-On — https://<MyGateway>/autoauth — is not working and returns the error “403 Forbidden.”

Forbidden

You don't have permission to access this resource.

Accessibility : ALL INTERFACES!!!

Any idea where is the issue ??

[PhoneBoy]

Not sure what you mean by independent Identity Awareness firewall, please elaborate.
Also, elaborate on versions/JHF in use.

[ShadowNif]

its just a cluster or 2 that have else to do except being Idenitiy Provider for other FWs... 

[the_rock]

Do you see any relevant logs regarding this?

[ShadowNif]

I tried to find anything in Captive Portal logs, but nothing interestingunless there some logs that i dont know about 

[CP_Chris]

Are you trying to directly access the URL? I believe when the authentication is actually done, there is additional information that is sent with the request that ultimately uses a URL different than the direct access URL. This may be why you are having issues accessing it directly. 

[ShadowNif]

A 403 error usually means that the firewall is blocking something, which doesn’t make sense to me.  using the same URL, but with a different prefix it works fine.