Negotiate to site failed - Azure SAML

[shantilalSuthar]

Hi Guys, Have integrated Azure SAML with SSLVPN. IdP authentication is working fine but VPN client showing negotiate to site failed.

I have used local users in remote access security policy 

Kindly suggest on the same.

[PhoneBoy]

Version/JHF of gateway?
Which VPN clients and versions?
Also, I’d start with this SK: https://support.checkpoint.com/results/sk/sk128652

[shantilalSuthar]

R81.20 SP & Take 24.

E87.31 VPN client version.

Do I need to integrate Azure AD with checkpoint ? Is it mandatory.

[PhoneBoy]

If you want to use SAML for Remote Access authentication, yes, it needs to be integrated as described in the documentation.

[the_rock]

I attached 2 documents that were always there in the sk previously, but it was modified at some point.

Andy

[the_rock]

That message is super generic, we would need to some some logs/debugs to get better idea.

Andy

[shantilalSuthar]

what logs are required ?