Add an Identity Federation Through

Common Services

Use one of the various ways to access
Common Services
Identity & Access
.
Select
Identity & Access
. Only one way is shown here.

Select
Identity & Access/Access Management
Identity Federations
Add Identity Federation
to add an identity federation.


Add the
Domain
information for your enterprise. The character limit is 50. Special characters are not allowed, with the exception of “-” and “.”
Select
Next
.
Follow the
Instructions for Verification
to add a DNS record within your domain name provider.
Copy the TXT record from the
Common Services
.
Select
Finish
.
Go to your domain provider’s console and paste the TXT record, so that Palo Alto Networks can verify that you are an owner of the domain. The console details look similar to the following, but all providers are slightly different.

(
Optional
) In the domain provider’s console, revise your identity provider’s time to live (TTL) setting if you need a faster refresh rate. The TTL setting impacts, for example, how long it takes to verify ownership of the identity federation.
In
Common Services
, select
Verify Now
to verify ownership of the identity federation.

(
Optional
) Add additional owners to manage the identity federation.
Configure a Security Assertion Markup Language (SAML) provider in one of the following ways:
Manually configure a SAML identity provider
Upload SAML identity provider metadata
Get the URL of a SAML identity provider
Clone a SAML identity provider configuration