Globalprotect and Shibboleth

[Steve Herrera]

We use Palo Alto firewalls here and the Globalprotect client as the method
for our users to VPN into campus. We are trying to get Globalprotect to use
SAML. The first hurdle we are running into is uploading the Shibboleth
self-signed certificate into the Palo Alto certificate profile. The error
we get is:

Import failed. Only self signed CA certificates can have identical subject
and issuer fields.

I have seen others posting about using Globalprotect and shibboleth on
here. My question is, are you using the shibboleth self-signed certificate
and were you able to import that into the Palo Alto? Or are you using a
different certificate?  I have a ticket open with Palo but they have not
been responsive.

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220609/e29e9977/attachment.htm>