STAS not authenticating users

Hi Kayode Odeyinka 

STAS having dependency with many settings. AD test connection from XG should work.Please use below KBA to verify the other settings related to STAS.

https://community.sophos.com/kb/en-us/123154

https://community.sophos.com/kb/en-us/123156

If connectivity between XG and STAS established properly then STAS app will serve XG IP under general tab:

User should populate under STAS app as per below KBA:

https://community.sophos.com/kb/en-us/123021

Also user should be able to login via Captive portal first which is not happening in your case. Please ensure that domain query settings are fine under AD integration with successful AD test connection and if that is fine then verify OTP is off for Captive portal login as that may also give this such error which generally required the combination of OTP and password.

https://community.sophos.com/kb/en-us/125228

Hi Kayode Odeyinka 

STAS having dependency with many settings. AD test connection from XG should work.Please use below KBA to verify the other settings related to STAS.

https://community.sophos.com/kb/en-us/123154

https://community.sophos.com/kb/en-us/123156

If connectivity between XG and STAS established properly then STAS app will serve XG IP under general tab:

User should populate under STAS app as per below KBA:

https://community.sophos.com/kb/en-us/123021

Also user should be able to login via Captive portal first which is not happening in your case. Please ensure that domain query settings are fine under AD integration with successful AD test connection and if that is fine then verify OTP is off for Captive portal login as that may also give this such error which generally required the combination of OTP and password.

https://community.sophos.com/kb/en-us/125228

Hi Vishal_R,

Thanks for your response.

Actually the AD test from XG works and the users are populated on STAS but not populated on Sophos XG, hence captive portal is not authenticating users.

Kindly assist.

Warm regards.

If the live user list is populated then I'd check the correct domain details (both Netbios and FQDN) match on STAS and on the XG, as well as the AD server is listed under the Firewall Authentication methods. Sometimes it helps if the AD server is at the top of the Authentication Server list.

Regards