Hello @Dan_ZA,

The first error usually occurs if you have not configured or enabled SAML Forward Proxy Auth.  The error indicates that it directed to your tenant but we could not forward to your IDP.  Do you have a SAML integration configured with your IDP under forward proxy? 

As for the second, I'm not a Linux expert either but I believe it's indicating that you should provide the -i OR the --idp flags not both.  So the command should be NSClient.run -i or  NSClient.run --idp.  You can also add the additional parameters for your tenant and domain using a similar syntax.  Please let me know if this doesn't work and I'm happy to look into this further. 

The 'pipe' or '|' character in linux is typically used to redirect the standard output of one command into another. It is also used frequently to denote mutually-exclusive flags, or aliases to a command. So when the documentation says "-i | --idp" it means to use only one of the options. For example you would use:

This tells the installer to use IDP mode and the tenant will be resolved to mytenant.goskope.com

sudo ./NSClient.run -i -t mytenant -d goskope.com
OR
sudo ./NSClient.run --idp -t mytenant -d goskope.com

sorry to clarify this was with using either of the flags that was a poor copy paste from my end 

I got this working after a fresh re-install of Ubuntu and using the -o [tenant id] and -m email address (input managed via provisioning script for the email address) so have managed to resolve this query now thank you

Just to repeat as above to clarify this was with using either of the flags that was a poor copy paste from my end 

I got this working after a fresh re-install of Ubuntu and using the -o [tenant id] and -m email address (input managed via provisioning script for the email address) so have managed to resolve this query now thank you