Request SAML Access
Table of Contents
Expand all | Collapse all
-
-
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Enable IoT Device Visibility in Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Prisma SD-WAN Standard VPN
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
-
- Native SASE Integration with Prisma SD-WAN
- Connect a Single Prisma SD-WAN Site to Prisma Access
- Connect Multiple Prisma SD-WAN Sites to Prisma Access
- Edit Application Policy Network Rules
- Understand Service and Data Center Groups
- Verify Standard VPN Endpoints
- Configure Standard Groups
- Assign Domains to Sites
- Prisma SD-WAN Incidents and Alerts
Request SAML Access
Let us learn to request SAML access to the
Prisma SD-WAN
.Request for SAML Single Sign On (SSO) access
from Palo Alto Networks Customer Support.
- Submit a request to enable SAML access to thePrisma SD-WANweb interface.
- Palo Alto Networks Customer Support receives the request.
- Palo Alto Networks Customer Support confirms that the account for the administrator exists in the system.The next step is to exchange metadata between Palo Alto Networks Service Provider (SP) and your IdP.
Exchange SAML Metadata
Metadata exchange between Palo Alto Networks Service Provider (SP) and your IdP
occurs prior to enabling SAML. Palo Alto Networks requires contact information
of the person responsible for authorizing SAML setup.
Only support_admin or support_super users can set up SSO using SAML. Ensure
you have the required set of permissions and privileges to initiate the SAML
setup.
- Palo Alto Networks provides Service Provider (SP) metadata<sp_meta_data_file>to configure within your IdP system.The communication between the Service Provider and the IdP is part of the pre-setup configuration outside of the Prisma SD-WAN web interface using emails.
- Import the Palo Alto Networks Customer Support provided SP metadata into your IdP system.
- Generate your IdP metadata<idp_meta_data_file>and provide it to Palo Alto Networks Customer Support.
- Provide custom role-mapping instructions to Palo Alto Networks, if any.If you require custom role mapping, you must provide group names and role mapping instructions to Palo Alto Networks.If you decide to use Palo Alto Networks groups, you must tag your end users with Palo Alto Networks groups in your IdP system. Create Palo Alto Networks suggested groups within your IdP system and add end users to the groups to access thePrisma SD-WANweb interface. Or provide group-to-role mapping instructions to Palo Alto Networks to configure in thePrisma SD-WANweb interface.
- Palo Alto Networks receives and configures the IdP metadata in thePrisma SD-WANweb interface.After the above process is complete, SAML is enabled. See Palo Alto Networks and IdP metadata to view sample Palo Alto Networks and IdP metadata.Only an IAM Admin, Super, or Root user, whose email domain matches the SAML domain, can modifyAAA Configurationusing thePrisma SD-WANweb interface, other than Palo Alto Networks Customer Support.