Troubleshooting Simulation does not appear to be working

[loosechanges]

I'm trying to use the Simulation tool for some policy testing.  The username, realm and resource fields are all filled in with accurate information and i'm mapping pre-auth, role mapping and tunneling policy; however, i'm not getting any correct results.  I'm seeing message such as:

-Input resource "tcp://192.168.2.40:1" cannot be traced for event "VPN Tunneling Policies" as the feature is not enabled in any of the session's roles

-Realm SSO did not map [email protected] to any roles

-Login failed from 0.0.0.0 for [email protected]/SSO. Not mapped to any roles.

Note that actual policy tracing works fine with the same parameters.

Are variables required to run simulations and if so, which ones?    Thank you.

[zanyterp]

if you are not using a system local user account, and a realm that uses it, simulation will fail
based on the name of the realm, SSO, i am guessing that is not the case; can you confirm the auth server set to be used by that realm?

[loosechanges]

Hello,

We do not use local accounts.  The Realm is using an Azure SAML auth server.  So just to be clear, the simulation tool only works with local accounts?  Thanks.

[zanyterp]

yes, that is correct