From 8f628a9f78b6c3bc0b27a5f249ea335548f2b69e Mon Sep 17 00:00:00 2001
From: Tino Lange <coldcoff@yahoo.com>
Date: Tue, 14 Apr 2020 11:51:47 +0200
Subject: [PATCH] make the error message more verbose in case a SAML request is
 missing in the response

---
 gp-okta.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gp-okta.py b/gp-okta.py
index 0f11c19..53f8e89 100755
--- a/gp-okta.py
+++ b/gp-okta.py
@@ -272,7 +272,7 @@ def paloalto_prelogin(conf, s, gateway=None):
 		if msg is not None:
 			msg = msg.strip()
 		else:
-			msg = 'Probably you need a certificate?'
+			msg = 'Probably SAML is disabled at the portal? Or you need a certificate? Try another_dance=0 with some concrete gateway instead.'
 		err('did not find saml request. {0}'.format(msg))
 	if len(saml_req.text.strip()) == 0:
 		err('empty saml request')