topic SAML Authentication for Gaia Administrators? in Firewall and Security Management

SAML Authentication for Gaia Administrators?

Timothy_Hall — Thu, 15 May 2025 13:32:09 GMT

Does R82 support SAML authentication for Gaia administrators (not SmartConsole administrators or RAS VPN users)? It appears the answer is no...

Re: SAML Authentication for Gaia Administrators?

PhoneBoy — Thu, 15 May 2025 14:09:28 GMT

Not as far as I know.
However, it appears we now support MFA for local Gaia OS users in R82 and R81.20 JHF 96+ using Google Authenticator: https://support.checkpoint.com/results/sk/sk181854

Re: SAML Authentication for Gaia Administrators?

the_rock — Thu, 15 May 2025 14:26:04 GMT

You referring to attached?

Andy

Re: SAML Authentication for Gaia Administrators?

Alex- — Thu, 15 May 2025 16:59:39 GMT

A couple of caveats, as noted in another thread:

-This works for CLISH, WebUI and expert but does after JHF upgrade, for instance from Take 98 to take 99, this stops working for CLISH and Expert, WebUI stays with 2FA. TAC case open

- The configuration state for administrators does not appear in the output of "show configuration", nor the enrolment status of the 2FA code, making this feature harder to evaluate when using automated GAIA auditing tools

- The toggle for this feature is "yes/no" when in GAIA this is usually "on/off", changing again the logic of argument evaluation, should it become visible