Difference between revisions of "Sentry SSO with Palo Alto"

From Swivel Knowledgebase
Jump to: navigation, search
Line 22: Line 22:
 
* SAML HTTP Binding for SLO Requests to IDP : Select Redirect
 
* SAML HTTP Binding for SLO Requests to IDP : Select Redirect
  
  Check : "Validate Identity Provider Certificate"
+
  Check : "Validate Identity Provider Certificate"
  
 
* Maximum Clock Skew (seconds) : 60
 
* Maximum Clock Skew (seconds) : 60

Revision as of 22:11, 24 January 2018


Setup AuthControl Sentry Keys

Before you are able to create a Single Sign On configuration on Google.com, you will need to setup some Keys. Please see a separate article: HowToCreateKeysOnCmi. You will need the certificate you generate in a later section of this article. This can be retrieved from the View Keys menu option of Swivel AuthControl Sentry.

Setup SSO on Palo Alto

SAML IDENTITY PROVIDER SERVER PROFILE

Profile Name: Swivel_sentry (example)

Identity Provider Configuration

 Check : "Validate Identity Provider Certificate"
  • Maximum Clock Skew (seconds) : 60