topic Re: To force NGFW login using SAML/SSO in Next-Generation Firewall Discussions

To force NGFW login using SAML/SSO

Khairul.Nizam — Fri, 23 May 2025 03:00:34 GMT

Is it possible to use SAML/SSO login instead of manual credential username/password.

Currently in the GUI page, we can either use manual credential / and SSO, but is it possible to force Admin to used SSO method instead.

Re: To force NGFW login using SAML/SSO

reaper — Tue, 27 May 2025 11:22:46 GMT

yes, there's 2 methods to do that

the simplest way is to create an authentication profile, and set the administrator's account to use that authentication profile instead of a local password

you can also set an authentication profile at the device level (you will need to set up radius or SAML with securrity assertions so admins get the appropriate admin role when they log on)

Re: To force NGFW login using SAML/SSO

Khairul.Nizam — Thu, 29 May 2025 08:14:06 GMT

I'm not sure why, but in the Administrator, it is now empty, not visible all the entry.

and I did choose the Authentication profile that I want

but on the login page, it still appears the manual login credential.