> Source: [sk182032](https://support.checkpoint.com/results/sk/sk182032)

# sk182032 - SAML login in SmartConsole fails when Gaia Portal on the Management Server runs on a different port than 443

| Property | Value |
|----------|-------|
| Solution ID | sk182032 |
| Date Created | 2024-02-20 |
| Last Modified | 2025-09-10 |
| Technical Level | General |
| Products | Security Management Server, Multi-Domain Security Management Server |
| Versions | R81.20, R81.20 |
| OS | Gaia |

## Symptoms

- SAML login in SmartConsole fails - a web browser opens the SAML authentication page, but the login times out.

## Cause

An administrator configured the Gaia Portal on the Management Server to work on a different port than the default TCP port 443. For example, on an on-premises Endpoint Security Server, the official instructions are to change the Gaia Portal to work on the TCP port 4434.

By design, SAML authentication for SmartConsole requires Gaia Portal on the Management Server to work on the TCP port 443.

## Solution

This problem was fixed. The fix is included in:

* [Check Point Quantum R82](https://support.checkpoint.com/results/sk/sk181127)
* [R81.20 SmartConsole](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20_SC/Default.htm) starting from Build 671

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue - improved SmartConsole.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect the [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.

**Hotfix installation instructions:**

1. Uninstall the current SmartConsole.

2. Install the new SmartConsole.

**How to log in:**

In the SmartConsole login window:

1. In the top field, click the leftmost icon and select **Identity Provider**.

2. In the bottom field, enter the IP address of the Management Server with the port, on which the Gaia Portal works on the Management Server.

   Example:
   > If the IP address of the Management Server is 192.168.22.55,
   >
   > and the Gaia Portal on the Management Server works on the TCP 4434,
   >
   > then in the SmartConsole login window, you must enter:
   >
   > `192.168.22.55:4434`
   >
   > ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk182032/Example202402211838151.png)

**How to get the port, on which the Gaia Portal works on the Management Server:**  
Show / Hide this section  
1. Connect to the command line on the Management Server.

2. Login to the Expert mode.

3. Run one of these commands:

   * `dbget httpd:ssl_port`

     Example output:
     >
     > ```
     > [Expert@MyMgmt:0]# dbget httpd:ssl_port
     > 4434
     > [Expert@MyMgmt:0]#  
     > ```

   * `api status`

     Example output - refer to the field "*APACHE Gaia Port*":
     >
     > ```
     > [Expert@MyMgmt:0]# api status
     > 
     > API Settings:
     > ---------------------
     > Accessibility:                      Require local
     > Automatic Start:                    Enabled
     > 
     > Processes:
     > 
     > Name      State     PID       More Information
     > -------------------------------------------------
     > API       Started   15645
     > CPM       Started   15645     Check Point Security Management Server is running and ready
     > FWM       Started   15184
     > APACHE    Started   16380
     > 
     > Port Details:
     > -------------------
     > JETTY Internal Port:               51302
     > JETTY Documentation Internal Port: 57941
     > APACHE Gaia Port:                  4434
     > 
     > Profile:
     > -------------------
     > Machine profile:                   Small Medium env resources profile
     > CPM heap size:                     1280m
     > 
     >                           Apache port retrieved from: dbget http:ssl_port
     > 
     > 
     > --------------------------------------------
     > Overall API Status: Started
     > --------------------------------------------
     > 
     > API readiness test SUCCESSFUL. The server is up and ready to receive connections
     > 
     > Notes:
     > ------------
     > To collect troubleshooting data, please run 'api status -s <comment>'
     > 
     > [Expert@MyMgmt:0]#
     > ```

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content