Configure the SAML application on the Identity Provider's website. - AZURE

[nflnetwork29]

I noticed there is Checkpoint apps in the Azure AD Gallery.

Can these be used when setting up the SAML application on the Identity Provider's website. The documentation is not clear .

Or do we need to create new (non-gallery) apps?

[PhoneBoy]

@Liel_Shaish 

[nflnetwork29]

found this video where two different azure apps are being used.

step 1 - create a non-gallery app to be used for the azure integration with smart console.

step 2 - use checkpoint gallery app to be used for SAML based-sign on with the VPN.

https://www.youtube.com/watch?v=yZVB3sJ3fZ8 

*** that being said my vpn rule where i have specified an access role that links to an azure group is not being matched correctly.  all my vpn traffic is hitting the cleanup rule. 

[PhoneBoy]

Have you performed the steps here? https://support.checkpoint.com/results/sk/sk177267 

[nflnetwork29]

yes, and also here.

https://support.checkpoint.com/results/sk/sk179788 

guessing you suggest open new ticket with TAC?

[Alex- · Accepted solution]

Check this thread.

Solved: Access Role not working? - Check Point CheckMates

[nflnetwork29]

Bingo! Thank you @Alex-  

I knew this document existed but i could not locate for the life of me!!!!!

@PhoneBoy  Why is this not being documented in an SK by check point?

[PhoneBoy]

Our documentation is generic and does not cover the exact steps needed in a given IdP.
These missing instructions belong in an IdP integration guide, which would definitely be useful to have.

[nflnetwork29]

i would think the IdP is Azure in 99% of the cases.  i could be wrong.