topic Re: Prisma access with Azure authentication in Prisma Access Discussions

Prisma access with Azure authentication

ohareka — Wed, 03 May 2023 17:47:33 GMT

Hello,

I have laptops for remote access authenticating with Active Directory for Prisma Access. I would like to now setup some users to be able to authenticate through Azure so they don't have to backhaul into our network. I have an Azure account but do i need to buy a new service connection (SC-CAN) to allow my users to have the option of authenticating through Azure. I have heard that using SAML is an option but havent used it before.

Happy to take any advice on what the best approach is.

thanks

Kevin

Re: Prisma access with Azure authentication

nikoolayy1 — Tue, 09 May 2023 07:28:38 GMT

If you have the cloud identity engine (CIE) you can also use SCIM with the Azure AD:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/identity-features/cloud-identity-engine

https://docs.paloaltonetworks.com/cloud-identity/cloud-identity-engine-getting-started/choose-directory-type/configure-an-on-premises-directory

https://docs.paloaltonetworks.com/cloud-identity/cloud-identity-engine-getting-started/choose-directory-type/configure-a-cloud-based-directory

Re: Prisma access with Azure authentication

ohareka — Tue, 09 May 2023 20:13:07 GMT

l'll give that a go. I do indeed have the cloud identity engine (CIE)