All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine. Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful authentication, and they receive the following error message: Error: Prisma Access Portal Authentication Failed using CIE-SAML with message "400 Bad Request" Which action will identify the root cause of this error? (Choose one answer)

A. Examine the Security policy rules in Prisma Access to ensure that traffic from the IdP is allowed and not blocked.
B. Verify the SAML metadata configuration in both Strata Cloud Manager (SCM) and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.
C. Verify the SAML metadata configuration in both the Cloud Identity Engine and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured
D. Review the Authentication logs in Strata Cloud Manager (SCM) to check for any SAML error messages or authentication failures.

Correct Answer: D

Brave-Dump Clients Votes

C 100%

Comments

Anonymous User 2026-10-15 08:49:26

Selected Answers: C

Similar question to Question 40. C should be the answer.

Both questions say to check the SAML metadata (endpoint URLs and certificates) on the Cloud Identity Engine and the IdP. The login works at the IdP but fails on the way back, so the two sides don’t trust each other’s SAML setup. A 400 means the request was rejected as malformed or invalid, which fits a bad URL or mismatched certificate. The docs show the setup works by downloading the SP metadata from the Cloud Identity Engine and uploading it to the IdP.