Authentication Sequence Profile with SAML

[jsrodrigues]

Hi,

I'm trying to configure in Strata Cloud Manager an Authentication Sequence Profile for our Prisma Access Tenant so users can use two different IdPs.

We are using SAML with Entra and are integrating a new company with their own Entra Tenant, so the idea is to have a sequence if the authentication fails in the first Entra it will try in the second one. Can I do this?

When I try to create the Authentication Sequence the SAML Profiles/server don't show on the list. Only Local Users.

What could be wrong?

Thanks

[JayGolf · Accepted solution]

Hi @jsrodrigues ,

Currently, Authentication Sequence profiles don’t support SAML, which is why your SAML profiles don’t appear in the list and only Local Users are shown. 

On NGFWs, achieving a similar outcome typically requires separate GlobalProtect portals, each tied to a different SAML server profile (for example, one per Entra tenant), rather than using an authentication sequence.

Hope this helps clarify things!

[jsrodrigues]

Any idea when this will be available?