SaaS Security Administrator's Guide
    : Remediate Identity Security Risks
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. SaaS Security Posture Management
    5. Remediate Posture Security Risks
    6. Remediate Identity Security Risks
    Download PDF

    SaaS Security Administrator's Guide

    Remediate Identity Security Risks

    Table of Contents

    Remediate Identity Security Risks

    Take action on identity security risks that you identified by using the Identity Security dashboard.
    SaaS Security Posture Management includes an Identity Security dashboard to help you identify misconfigurations in your identity posture. Specifically, the dashboard gives you visibility into problems with your multi-factor authentication (MFA) implementation, such as MFA enrollment and MFA sign-in issues. After you use this dashboard to identify misconfigurations in your identity posture, you can take action to resolve the problems.
    1. Navigate to the Identity Security dashboard (
      Posture Security
      Identity
      ), and view the MFA misconfigurations that the Identity Security component detected from your identity provider.
    2. After you have identified the MFA misconfigurations, take action as needed. If users have no MFA or weak MFA, have them enroll in the strong second factors that your organization requires. If users are logging in to SaaS applications without MFA or with weak MFA, create or modify policies to close the MFA enforcement gaps.
      To help you remediate identity security risks, you can take the following actions:
      • For MFA enrollment issues, you can open a ticket in a ticket management system to assign a team member to investigate and resolve problems.
        1. Navigate to the
          User Details and MFA Configurations
           tab.
        2. Select the user in the table.
        3. File Ticket
          .
        To view the tickets that you and other administrators have opened, navigate to the
        Filed Tickets
         tab.
      • For the Okta identity provider, after you close any MFA enforcement gaps in your policies, you can make a user sign in again. To make a user sign in again, you can force the user out of their current SaaS application sessions.
        1. Navigate to the
          User Sign-in Activities
           tab and select the user in the table.
        2. Logout all IdP sessions
          .

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.