MFA on Prisma Cloud Compute Edition

samson.c — Wed, 19 Apr 2023 18:02:57 GMT

We need to enforce MFA to log in to the twistlock console.

Is it possible to do that on the Cloud Compute Edition (self-hosted)?

Re: MFA on Prisma Cloud Compute Edition

CloudEngineer — Fri, 21 Apr 2023 14:21:45 GMT

Hi Samson,

The best way to accomplish this is with the following combination features/configurations:

Limit your local database users to what I'll call only "emergency admins" so there is still access if SSO fails.
Configure RBAC so that your non-admin users will not have access to any User, Group, or Authentication related options
Configure your SSO Sign-out URL to be the login page of your SSO portal instead of the login page of Compute
1. For example, in the case of using Okta for SAML integration, you could enter "https://mycompany.okta.com"

I hope this helps! Please let me know!

Regards,