MFA on Prisma Cloud Compute Edition

[samson.c]

We need to enforce MFA to log in to the twistlock console.

Is it possible to do that on the Cloud Compute Edition (self-hosted)?

[CloudEngineer]

Hi Samson,

The best way to accomplish this is with the following combination features/configurations:

1. Limit your local database users to what I'll call only "emergency admins" so there is still access if SSO fails.
2. Configure RBAC so that your non-admin users will not have access to any User, Group, or Authentication related options
3. Configure your SSO Sign-out URL to be the login page of your SSO portal instead of the login page of Compute
   1. For example, in the case of using Okta for SAML integration, you could enter "https://mycompany.okta.com"

I hope this helps! Please let me know!

Regards,