Re: Openconnect - Palo Alto - Okta SSO / MFA

On Fri, Apr 13, 2018 at 8:31 AM, Luis l wrote: > After digging around i THINK its a part of this? > > https://github.com/arthepsy/pan-globalprotect-okta/ > > I downloaded it added the totp of that moment, removed pw to prompt me > instead of conf and i get the below from

Re: Openconnect - Palo Alto - Okta SSO / MFA

and i sent prior and piped into the openconnect cmd? --- # status: MFA_REQUIRED --- err: no factor url found From: Daniel Lenski <dlen...@gmail.com> Sent: Friday, April 13, 2018 2:23 AM To: Luis l Cc: David Woodhouse; openconnect-devel Subject: Re: Openconnect - Palo Alto - Okta SSO / MFA  

Re: Openconnect - Palo Alto - Okta SSO / MFA

ct: Re: Openconnect - Palo Alto - Okta SSO / MFA   On Wed, Apr 11, 2018 at 8:14 AM, Luis l <chel...@hotmail.com> wrote: > > Thank you guys, I wasnt sure where to post it so any guidance would help. > > > So yes Okta / IDP = SSO = Multifactor Auth doesnt work > > > I saw that in

Re: Openconnect - Palo Alto - Okta SSO / MFA

Not sure where the instructions are for the specific commit. Currently can't find those files after a recent fetch From: Daniel Lenski <dlen...@gmail.com> Sent: Friday, April 13, 2018 2:23 AM To: Luis l Cc: David Woodhouse; openconnect-devel Subject: Re: Openconnect - Palo Alto - Ok

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Thu, Apr 12, 2018 at 7:14 PM, Daniel Lenski wrote: > On Fri, Apr 6, 2018 at 11:23 AM, David Woodhouse wrote: >> Where *are* we with merging it? I did some heckling >> at the last round of patches as there was some string allocation >> confusion, and it

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Wed, Apr 11, 2018 at 8:14 AM, Luis l wrote: > > Thank you guys, I wasnt sure where to post it so any guidance would help. > > > So yes Okta / IDP = SSO = Multifactor Auth doesnt work > > > I saw that in the link i pasted they get presented with it, but if its still > not

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Fri, Apr 6, 2018 at 11:23 AM, David Woodhouse wrote: > Where *are* we with merging it? I did some heckling > at the last round of patches as there was some string allocation > confusion, and it looked like it hadn't been run in valgrind. Did you > give me another set after

Re: Openconnect - Palo Alto - Okta SSO / MFA

- Palo Alto - Okta SSO / MFA   On Apr 6, 2018 2:23 PM, "David Woodhouse" <dw...@infradead.org> wrote: >On Fri, 2018-04-06 at 11:54 -0500, Daniel Lenski wrote: >> On Fri, Apr 6, 2018 at 11:27 AM, Luis l <chel...@hotmail.com> wrote: >> > Hi Guys, I am us

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Tue, Apr 10, 2018 at 5:37 AM, Daniel Lenski wrote: > On Apr 6, 2018 2:23 PM, "David Woodhouse" wrote: >>On Fri, 2018-04-06 at 11:54 -0500, Daniel Lenski wrote: >>> On Fri, Apr 6, 2018 at 11:27 AM, Luis l wrote: >>> > Hi Guys, I am

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Apr 6, 2018 2:23 PM, "David Woodhouse" wrote: >On Fri, 2018-04-06 at 11:54 -0500, Daniel Lenski wrote: >> On Fri, Apr 6, 2018 at 11:27 AM, Luis l wrote: >> > Hi Guys, I am using the latests version of OC w/ Palo Alto VPN … >> >> As explained on the

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Fri, 2018-04-06 at 11:54 -0500, Daniel Lenski wrote: > On Fri, Apr 6, 2018 at 11:27 AM, Luis l wrote: > > Hi Guys, I am using the latests version of OC w/ Palo Alto VPN … > > As explained on the page for the fork with PAN GlobalProtect support >

Re: Openconnect - Palo Alto - Okta SSO / MFA

On Fri, Apr 6, 2018 at 11:27 AM, Luis l wrote: > Hi Guys, I am using the latests version of OC w/ Palo Alto VPN … As explained on the page for the fork with PAN GlobalProtect support (https://github.com/dlenski/openconnect#feedback-and-troubleshooting), you should report

Openconnect - Palo Alto - Okta SSO / MFA

Hi Guys, I am using the latests version of OC w/ Palo Alto VPN and Okta as the IDP / MFA. Using NON mfa/okta the process works and connects but when using okta it does not prompt me for the MFA key. Gives a error of HTTP body length: (128) Unexpected 512 result from server Invalid username or