This section describes integration procedures you perform to integrate Prisma Access with the Cloud Identity Engine and with third-party authentication providers.

In addition to using the Cloud Identity Engine to authenticate users with its Cloud Authentication Service component, you can use the Cloud Identity Engine’s Directory Sync component to collect username-to-user group mapping and enforce user- and group-based policy.

Authenticate Panorama Managed Prisma Access GlobalProtect Mobile Users With the Cloud Identity Engine

Authenticate Panorama Managed Prisma Access Explicit Proxy Mobile Users With the Cloud Identity Engine

Configure Azure AD SAML Authentication for Mobile User Deployments

SAML Authentication Using Okta as IdP for Mobile Users

Configure ADFS as a SAML Provider for Mobile Users

Configure VPN Reverse Proxy for SaaS Security