Use this page to configure settings for authenticating administrators and end users. The firewall and Panorama support local, RADIUS, TACACS+, LDAP, Kerberos, SAML 2.0, and multi-factor authentication (MFA) services.

You can also use this page to register a firewall or Panorama service (such as administrative access to the web interface) with a SAML identity provider (IdP). Registering the service enables the firewall or Panorama to use the IdP for authenticating users who request the service. You register a service by entering its SAML metadata on the IdP. The firewall and Panorama make registration easy by automatically generating a SAML metadata file based on the authentication profile that you assigned to the service; you can export this metadata file to the IdP.