MFA Vendor Support
For the following authentication use cases, Palo Alto Networks® appliances can integrate with multi-factor authentication (MFA) vendors using RADIUS and, in PAN-OS® 8.0, using SAML:
- Remote user authentication through the GlobalProtect™ portals and gateways.
- Administrator authentication in the PAN-OS and Panorama™ web interface.
- Authentication through the Captive Portal policy (PAN-OS 7.1 and earlier releases) and Authentication policy (PAN-OS 8.0 and later releases).
Additionally, firewalls running a PAN-OS 8.0 or later release can also integrate with the following MFA vendors using the API to enforce MFA through Authentication policy.
Palo Alto Networks provides support for MFA vendors through Applications content updates. This means that if you use Panorama to push device group configurations to firewalls, you must install the same Applications release version on the firewalls as on Panorama to avoid mismatches in vendor support.
|MFA Vendor||Minimum Content Release Version|
RSA SecurID Access
Configure Multi-Factor Authentication
Configure Multi-Factor Authentication To use Multi-Factor Authentication (MFA) for protecting sensitive services and applications, you must configure Captive Portal to display a web form for ...
Device > Server Profiles > Multi Factor Authentication
Device > Server Profiles > Multi Factor Authentication Use this page to configure a multi-factor authentication (MFA) server profile that defines how the firewall connects ...
Multi-Factor Authentication You can Configure Multi-Factor Authentication (MFA) to ensure that each user authenticates using multiple methods (factors) when accessing highly sensitive services and applications. ...
Configure an Authentication Profile
Authentication Profile Device > Authentication Profile Select Device Authentication Profile or Panorama Authentication Profile to manage authentication profiles. To create a new profile, Add one ...
Configure MFA Between RSA SecurID and the Firewall
Configure MFA Between RSA SecurID and the Firewall Multi-factor authentication allows you to protect company assets by using multiple factors to verify a user’s identity ...
Configure GlobalProtect to Facilitate Multi-Factor Authenti...
Configure GlobalProtect to Facilitate Multi-Factor Authentication Notifications To protect critical applications and stop attackers from using stolen credentials to conduct lateral movement throughout your network, ...
Configure MFA Between Duo and the Firewall
Configure MFA Between Duo and the Firewall Multi-factor authentication (MFA) allows you to protect company assets by using multiple factors to verify the identity of ...
Configure MFA between Okta and the firewall
Configure MFA Between Okta and the Firewall Multi-factor authentication allows you to protect company assets by using multiple factors to verify the identity of users ...
Configure RADIUS Authentication
Configure RADIUS Authentication You can configure RADIUS authentication for end users and firewall or Panorama administrators. For administrators, you can use RADIUS to manage authorization ...