A customer has configured the JIT, and the user created by the process is trying to log in to the Prisma Cloud console. The user encounters the following error message:
What is the reason for the error message?
A customer has configured the JIT, and the user created by the process is trying to log in to the Prisma Cloud console. The user encounters the following error message:
What is the reason for the error message?
The error message indicates that there is an issue with the attributes required for Just-In-Time (JIT) provisioning in SAML configuration. Specifically, it mentions an unexpected value for the 'SAML_RESPONSE' field. The expected value is 'unavailable', but an actual role value was provided. This suggests that the attribute name or value for JIT provisioning is not correctly set in the JIT settings.
A See "Error -4" in this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMYeCAM
D https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-administrator-authorization-and-authentication/single-sign-on-access-using-saml/saml-setup-errors
Error 4: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMYeCAM
D for exclusion.