topic Re: Use of MFA to log on to Cortex XDR in Cortex XDR Discussions

Use of MFA to log on to Cortex XDR

simoore — Mon, 04 Jan 2021 16:15:10 GMT

How do I set up MFA for admin access to the Cortex XDR console?

Re: Use of MFA to log on to Cortex XDR

KRisselada — Mon, 04 Jan 2021 16:53:57 GMT

To leverage 2FA for your Palo Alto user account, I find you can select the following if you wish to require all your Company Account users to require to use it:

1. In Palo Alto CSP (Customer Support Portal, aka https://support.paloaltonetworks.com)

2. Account Management > Account Details

3. Select the Security Settings "Enable 2 Factor Authentication"

Or select this individually for users via Members > Manage Users

Re: Use of MFA to log on to Cortex XDR

simoore — Tue, 05 Jan 2021 12:58:30 GMT

Not a user at the moment, advising a potential user. Is access to Cortex XDR console through the CSP then?

Re: Use of MFA to log on to Cortex XDR

KRisselada — Tue, 05 Jan 2021 14:13:28 GMT

No, that access is via the Cortex XDR HUB (https://apps.paloaltonetworks.com)
You apply the role access you would to a user via the Cortex Hub, but in order for a user to be visible to manage, they need their Palo Alto User Account, associated with a customer and that is in the Palo Alto CSP. At least that has been my experience.
I would request others that have different experience to share here and correct as needed.

Re: Use of MFA to log on to Cortex XDR

dfalcon — Tue, 05 Jan 2021 14:20:47 GMT

@KRisselada is correct.

Re: Use of MFA to log on to Cortex XDR

CyberEye — Wed, 19 May 2021 07:23:11 GMT

Dear Fols,

Can we integrate the second factor auth us azure AD?