Prisma Access: SAML Auth - Urgent - Must Read
Incident Report for Palo Alto Networks Cloud Services
Resolved
This incident has been resolved.
Posted Jun 29, 2020 - 05:02 UTC
Identified
Please follow the best practices to ensure that your SAML IdP sends signed SAML Responses or Assertions. Configure the signing certificate of your SAML IdP as the Identity Provider Certificate on Panorama or Prisma Access Cloud Management portal before June 26, 2020 19:00 UTC, so that your users can continue to authenticate successfully.
For more information, refer to this Knowledge Base article to verify your SAML configuration: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UVY
Posted Jun 19, 2020 - 23:37 UTC
Update
Please follow the best practices to ensure that your SAML IdP sends signed SAML Responses or Assertions. Configure the signing certificate of your SAML IdP as the Identity Provider Certificate on Panorama or Prisma Access Cloud Management portal before June 26, 2020 19:00 UTC, so that your users can continue to authenticate successfully.
For more information, refer to this Knowledge Base article to verify your SAML configuration: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UVY
Posted Jun 19, 2020 - 19:00 UTC
Investigating
Please follow best practices by ensuring your SAML IdP sends signed SAML Responses or Assertions. Configure the signing certificate of your SAML IdP as the Identity Provider Certificate on Panorama or Prisma Access Cloud Management Portal before June 26, 2020 19:00 UTC so that your users can continue to authenticate successfully.
Posted Jun 19, 2020 - 06:51 UTC
This incident affected: Prisma Access (Americas-Argentina, Americas-Bolivia, Americas-Brazil Central, Americas-Brazil East, Americas-Brazil South, Americas-Canada Central, Americas-Canada East, Americas-Canada West, Americas-Chile, Americas-Colombia, Americas-Costa Rica, Americas-Ecuador, Americas-Mexico Central, Americas-Mexico West, Americas-Panama, Americas-Paraguay, Americas-Peru, Americas-US Central, Americas-US East, Americas-US Northeast, Americas-US Northwest, Americas-US South, Americas-US Southeast, Americas-US Southwest, Americas-US West, Americas-Venezuela, APAC-Australia East, APAC-Australia South, APAC-Australia Southeast, APAC-Bangladesh, APAC-Cambodia, APAC-Hong Kong, APAC-India North, APAC-India South, APAC-India West, APAC-Indonesia, APAC-Japan Central, APAC-Japan South, APAC-Malaysia, APAC-Myanmar, APAC-New Zealand, APAC-Pakistan South, APAC-Pakistan West, APAC-Papua New Guinea, APAC-Philippines, APAC-Singapore, APAC-South Korea, APAC-Taiwan, APAC-Thailand, APAC-Vietnam, EMEA-Andorra, EMEA-Austria, EMEA-Belarus, EMEA-Belgium, EMEA-Bulgaria, EMEA-Croatia, EMEA-Czech Republic, EMEA-Denmark, EMEA-Finland, EMEA-France North, EMEA-France South, EMEA-Germany Central, EMEA-Germany North, EMEA-Germany South, EMEA-Greece, EMEA-Hungary, EMEA-Ireland, EMEA-Italy, EMEA-Liechtenstein, EMEA-Lithuania, EMEA-Luxembourg, EMEA-Moldova, EMEA-Monaco, EMEA-Netherlands Central, EMEA-Netherlands South, EMEA-Norway, EMEA-Poland, EMEA-Portugal, EMEA-Romania, EMEA-Russia Central, EMEA-Russia Northwest, EMEA-Slovakia, EMEA-Slovenia, EMEA-Spain Central, EMEA-Spain East, EMEA-Sweden, EMEA-Switzerland, EMEA-UK, EMEA-Ukraine, EMEA-Uzbekistan, EMEA-Kenya, EMEA-Nigeria, EMEA-South Africa Central, EMEA-South Africa West, EMEA-Egypt, EMEA-Israel, EMEA-Jordan, EMEA-Kuwait, EMEA-Saudi Arabia, EMEA-Turkey, EMEA-United Arab Emirates, Americas-Brazil South (Location on-boarded prior to version 1.4), Americas-Canada East (Location on-boarded prior to version 1.4), Americas-US Central (Location on-boarded prior to version 1.4), Americas-US East (Location on-boarded prior to version 1.4), Americas-US Northwest (Location on-boarded prior to version 1.4), Americas-US West (Location on-boarded prior to version 1.4), APAC-Australia Southeast (Location on-boarded prior to version 1.4), APAC-India West (Location on-boarded prior to version 1.4), APAC-Japan Central (Location on-boarded prior to version 1.4), APAC-Singapore (Location on-boarded prior to version 1.4), APAC-South Korea (Location on-boarded prior to version 1.4), EMEA-France North (Location on-boarded prior to version 1.4), EMEA-Germany Central (Location on-boarded prior to version 1.4), EMEA-Ireland (Location on-boarded prior to version 1.4), EMEA-UK (Location on-boarded prior to version 1.4)).