> Source: [sk181526](https://support.checkpoint.com/results/sk/sk181526)

# sk181526 - Intermittent authentication failures to Azure AD on an Identity Awareness Security Gateway

| Property | Value |
|----------|-------|
| Solution ID | sk181526 |
| Date Created | 2023-10-01 |
| Last Modified | 2024-10-22 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82, R81.20, R81.10 (EOS), R81 (EOS) |

## Symptoms

- * Users authentication intermittently fails on an Identity Source that uses Azure AD.

* The PDPD daemon is unresponsive when queried with `pdp cli` commands.

* You can see frequent blockers in the pdpd.elg log files, for example:  

  `Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPshrd-R81.10/lib/libasyncCurl.so], Function offset [0x9e40]`

* The host: *ocsp.digicert.com* is seen frequently in the CRL/OCSP validation flow.  

  You can see the drop logs from the Security Gateway's IP address and destination port 80, or if the rules are configured without log, you can run kernel debug of the fw module with drop flag.

## Cause

A timeout occurs when the PDPD daemon attempts to validate CRL/OCSP for Microsoft Cloud Services.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content