Prisma Access + CIE information

Hello there,

Just wanted to inform you of this weird issue :

We are using Prisma Access for Mobile Users. Authentication via Entra ID, Group Mapping via CIE.

All working fine, until migrating external contractors (Cannot find a configuration within GP Portail).

TAC answer : UPN could not have more than 63 characters (yes, you can see the variable issue).

So we had to replace UPN of external users from user.name#EXT#@mydomain.onmicrosoft.com to user.name#[email protected]

The good point is that does not change anything to authentication process are they are not directly authenticated by your Tenant but directly from their own tenant / Microsoft.

I hope this can help someone sometime :)