
9bvm7 (9bvm7) asked a question.
Heelo Guys
I am getting below error after okta authentication for accessing Palo Alto GP portal.
Sorry, you can't access Palo Alto Networks - GlobalProtect because you are not assigned this app in Okta.
FYI the app is assigned to the user from the okta portal.
Regards

Hi Mohammed Asim Bakshi,
When you receive errors such as the user not being assigned to the application this can be due to multiple Okta sessions, i.e. the user has logged into Okta with another account such as a designated admin account. This session is then used when the user is redirected to Okta for authentication.
As such it is worth testing by clearing the browser cache to ensure there are no active session on the users browser.
Otherwise there may be provisioning error fr the user as such they have not been completely assigned. Double checking the Dashboard tasks for any provisioning errors can help resolve issue like this as well.
Thanks,
Chris Hancock