This section describes how to enable Admin UI with RSA Cloud Authentication Service or RSA Authentication Manager using Authentication.

Procedure 

1. To enable Admin UI Authentication, you can specify the user by creating it by going to Device > Administrators where you will be able to set their authentication profile/admin role.
   
2. You can generalize the logging to the Admin UI without creating the Users on Palo Alto unlike point 1 by going to Device > Setup > Authentication Settings and Choosing your Authentication Profile for GUI and CLI. You are then required to return at least the Admin Role and also if needed the User Group from RSA Server (Depending on the Allow List configured for that authentication profile). Refer to this Section for Cloud RSA RADIUS Profiles and this Section for RSA Authentication Manager RADIUS Profiles configurations. Next, choose the Authentication Profile needed (RADIUS/SAML) from the Palo Alto side, refer to this Section for the related needed configuration.
   

Return to the main page .