Palo Alto Networks SSE-Engineer Exam - Topic 2 Question 27 Discussion

Question

All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine. Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful authentication, and they receive this error message: Error: Prisma Access Portal Authentication Failed using CIE-SAML with message ''400 Bad Request''. Which action will identify the root cause of this error? URLs and certificates are correctly configured.

Adelina · Accepted Answer

C) Verify the SAML metadata configuration in both the Cloud Identity Engine and the IdP portal to confirm that the endpoint

Adelina · Answer

A) Verify the SAML metadata configuration in both Strata Cloud Manager and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.

Adelina · Answer

B) Examine the Security policy rules in Prisma Access to ensure that traffic from the IdP is allowed and not blocked.

Adelina · Answer

D) Review the Authentication logs in Strata Cloud Manager to check for any SAML error messages or authentication failures.