topic Re: Using SP or IDP for cortex XDR with Azure AD in Cortex XDR Discussions

Using SP or IDP for cortex XDR with Azure AD

KamalLohchab — Tue, 24 Oct 2023 15:37:01 GMT

Hello Folks

Is it possible to use Azure AD to sign in to Cortex XDR and manage user access from Azure AD itself rather than creating accounts in the Cortex XDR individually for a large number of users?

Thanks

Re: Using SP or IDP for cortex XDR with Azure AD

jmazzeo — Tue, 24 Oct 2023 15:47:13 GMT

Hi @KamalLohchab , thanks for reaching the Live Community.

Yes you can use SSO with any IDP supporting SAML 2.0.

Please check the instructions here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Manage-Single-Sign-On

You can map an IDP group to a XDR user group with a role assigned in the console after the integration.

Let me know if this helps.

Re: Using SP or IDP for cortex XDR with Azure AD

KamalLohchab — Tue, 24 Oct 2023 15:54:30 GMT

Hi @jmazzeo This way we wouldn't have to manage individual user accounts but just one single user group, right? and we can manage Users in Azure AD by adding/removing them in the AD group on the azure side?

Re: Using SP or IDP for cortex XDR with Azure AD

jmazzeo — Tue, 24 Oct 2023 15:57:19 GMT

@KamalLohchab That's correct, in the Cortex XDR console you will only need to configure the Azure AD Group mapping with the Cortex XDR User Group Mapping, and assign a role to the group. Then the users are added/removed on this mentioned Azure AD Group.