Use of MFA to log on to Cortex XDR

[simoore]

How do I set up MFA for admin access to the Cortex XDR console?

[KRisselada]

To leverage 2FA for your Palo Alto user account, I find you can select the following if you wish to require all your Company Account users to require to use it:

1. In Palo Alto CSP (Customer Support Portal, aka https://support.paloaltonetworks.com)

2. Account Management > Account Details

3. Select the Security Settings "Enable 2 Factor Authentication"

Or select this individually for users via Members > Manage Users

[simoore]

Not a user at the moment, advising a potential user.  Is access to Cortex XDR console through the CSP then?

[KRisselada]

No, that access is via the Cortex XDR HUB (https://apps.paloaltonetworks.com) 
You apply the role access you would to a user via the Cortex Hub, but in order for a user to be visible to manage, they need their Palo Alto User Account, associated with a customer and that is in the Palo Alto CSP.  At least that has been my experience.
I would request others that have different experience to share here and correct as needed.

[dfalcon]

@KRisselada is correct. 

[CyberEye]

Dear Fols,

Can we integrate the second factor auth us azure AD?