Using SP or IDP for cortex XDR with Azure AD

[KamalLohchab]

Hello Folks

Is it possible to use Azure AD to sign in to Cortex XDR and manage user access from Azure AD itself rather than creating accounts in the Cortex XDR individually for a large number of users?

Thanks

[jmazzeo]

Hi @KamalLohchab , thanks for reaching the Live Community.

Yes you can use SSO with any IDP supporting SAML 2.0.

Please check the instructions here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Manage-...

You can map an IDP group to a XDR user group with a role assigned in the console after the integration.

Let me know if this helps.

[KamalLohchab]

Hi @jmazzeo This way we wouldn't have to manage individual user accounts but just one single user group, right? and we can manage Users in Azure AD by adding/removing them in the AD group on the azure side? 

[jmazzeo]

@KamalLohchab That's correct, in the Cortex XDR console you will only need to configure the Azure AD Group mapping with the Cortex XDR User Group Mapping, and assign a role to the group. Then the users are added/removed on this mentioned Azure AD Group.