Configure an authentication profile.
If your users are in multiple Kerberos realms, create an authentication profile for each realm and assign all the profiles to an authentication sequence. You can then assign the same authentication sequence to all user accounts (
Configure an Administrative Account.
For local database authentication, specify the
of the user you defined in
or sequence and the Admin Role
that you just created.
Configure an Authentication Profile and Sequence An authentication profile defines the authentication service that validates the login credentials of firewall or Panorama administrators and Captive ...
Configure an Administrator with Kerberos SSO, External, or Local Authentication
Configure an Administrator with Kerberos SSO, External, or Local Authentication When you configure Administrative Authentication for an administrator account, you can combine Kerberos single sign-on ...
Configure Kerberos Single Sign-On
Configure Kerberos Single Sign-On Palo Alto Networks firewalls and Panorama support Kerberos V5 single sign-on (SSO) to authenticate administrators to the web interface and end ...
Kerberos for Internal Gateway for Windows
Kerberos for Internal Gateway for Windows GlobalProtect clients running on Windows 7, 8, or 10 now support Kerberos V5 single sign-on (SSO) for GlobalProtect portal ...
Configure Local Database Authentication
Configure Local Database Authentication You can use a local firewall database instead of an external service to manage user account credentials and authentication. For example, ...
Administrative Authentication You can configure the following types of administrator authentication: Account Type Authentication Method Description Local Local (no database) The administrator account credentials and ...
Map IP Addresses to Usernames Using Captive Portal
Map IP Addresses to Usernames Using Captive Portal If the firewall receives a request from a security zone that has User-ID enabled and the source ...
Authentication Many of the services that Palo Alto Networks firewalls and Panorama provide require authentication, including administrator access to the web interface and end user ...
Enable External Authentication for Users and Services
Enable External Authentication for Users and Services Palo Alto Networks firewalls and Panorama can use external services to authenticate administrators and end users. Enable External ...