topic Re: identity awareness in Firewall and Security Management

identity awareness

FrankXie — Thu, 21 Jul 2022 07:06:51 GMT

Hello expert

I am poc identity awareness with browser based authentication.

I am trying to forward user from identify agent to radius server for authentication. My user name is in format abc@xyz.com, but I found identity awareness only forward abc to radius server, it stripped @xyz.com. My backend radius server hence reject request. How can I keep the full name?

----- sorry, turns out my problem is I can't find user abc@xyz.com in my domain xyz.com, but I can find abc in my domain xyz.com.

Then my problem is if I add xyz.com, my ldap server told me user doesn't exist.

If I don't add xyz.com, then my rsa server told me server not exist.

Is there a way checkpoint can remove xyz.com while search in ldap server?

Thanks in advance for your response.

Regards

Frank

Re: identity awareness

Chris_Atkinson — Thu, 21 Jul 2022 07:28:43 GMT

Please take a look at sk122477 and discuss further with TAC as needed.

Re: identity awareness

FrankXie — Thu, 21 Jul 2022 07:48:43 GMT

Thanks Chris, I will reach out the TAC.

Re: identity awareness

Sorin_Gogean — Fri, 22 Jul 2022 06:33:58 GMT

hi,

any reason you want to have the browser authentication ? I'm asking because we implemented Identity Awareness with AD via Identity Collector and all is good till now.

ty,

Re: identity awareness

FrankXie — Mon, 25 Jul 2022 04:18:03 GMT

Mainly MFA.