Validation Error for Identity Provider

[Sanjay_S]

Hi All,

Last week i upgraded our MDS from R81 to R81.10, it was all successful. No major issues observed.

However i see some cosmetic error in one of our customer's domain. We are getting validation error for the identity provider created for the SAML authentication. Error says "VPN is not supported" and the other error says "Incorrect fields in SAML Service." 

Though these validation errors are there i am still able to push the policy without any issues. Also i upgraded the smart Console to the latest build version 413 and i still see the same. 

Did anyone come across this kind of issue post upgrade?

Regards,

Sanjay S

[Chris_Atkinson]

Can you please confirm which JHF take the environment is installed with currently?

[Sanjay_S]

Hi Chris,

It is JHF 87.

Regards,

Sanjay S

[PhoneBoy]

It may be you need to reapply the steps from: https://support.checkpoint.com/results/sk/sk172909

[Sanjay_S]

Hi PhoneBoy,

Suggesting to install the script in MDS for the domain and then Create the Identity Provider. And configure the SAML authentication. Are these steps you suggesting?

Usually if we have validation error we we will not be able to push the policy untill we fix it right?

Regards,

Sanjay S

[PhoneBoy]

I believe you need to run the script again (maybe not the other steps).
However, I would check this with TAC.

[Sanjay_S]

Hi PhoneBoy,

You heard anything from TAC on this?

Regards,

Sanjay S

[PhoneBoy]

You would need to open a ticket with TAC: https://help.checkpoint.com 

[cyberluke365]

Hello guys,

we had the exactely the same issue when migrated the Management from R81 to R81.10.

The solution is pretty simple: just add a comment in the Identity Provider Object (source: sk173707).