Group-based authorization for Azure SAML users

EiMJiaxinY — Wed, 18 Oct 2023 08:33:20 GMT

We now have finished the integration of GlobalProtect with Azure SAML, the authentication process is running properly without any issue. However, because of different types of users: staff, vendor and admin, which required more precise permission management for each group of users. I have tried searching online, but cannot get a viable way to make it work.

My understanding behind the expected solution is to retrieve the group attribute from SAML, then I should be able to write specific security policies based on that group to manage the access of the authorized users.

topic Group-based authorization for Azure SAML users in GlobalProtect Discussions

Group-based authorization for Azure SAML users