Use the Authentication Logs for Troubleshooting

Table of Contents

Troubleshoot Cloud Identity Engine Issues

Use the Authentication Logs for Troubleshooting

Learn how to check the Authentication Logs for information that you can use to troubleshoot authentication issues with the Cloud Identity Engine.

Where Can I Use This?	What Do I Need?
NGFW Prisma Access	The Cloud Identity Engine service is free; however, the enforcement points utilizing directory data may require specific licenses. Click here for more information.

To troubleshoot authentication issues with identity providers or the firewall, use the Authentication Logs to review messages to the log.

Each authentication phase generates at least two log entries, with the exception of SAML authentication using multiple CA chains in a certificate type, which generates three log entries.

In the Cloud Identity Engine app, select AuthenticationAuthentication Logs.
To ensure the page displays the latest data, click Apply Search/Refresh.
Use the Date selector to search based on when the issue occurred.
Select the number of results you want to Show on each page.
Select whether you want to display the results in order of Newest first or Newest last.
Select a Profile to restrict the search results to a specific identity provider (IdP) profile.
Select the Status you want to display (All Status, Success, or Fail).
To Search by keyword, enter a search term and Apply Search.
To view the SAML request and response and the JSON web token (JWT), select the Details (

) for the row that contains the data you want to view.
The log details display, allowing you to review the Data Received by the Cloud Identity Engine from your IdP and the Data Sent by the IdP to the Cloud Identity Engine. You can copy (

) the text to use for troubleshooting.
Review the results to look for entries that indicate issues.
(Optional) Export the results as a .CSV file.