CG SaaS - What are the recommended MFA solution

Kim_Moberg — Sun, 17 Mar 2019 19:03:46 GMT

Hi CheckMates,

Does anyone have any experience and possible recommendation for a Identity Provider for ID-Guard for Identity in CG SaaS?

I see Check Point are pointing at Okta, Microsoft AD FS and Centrify in the help guides for CG SaaS.

I am not finding which product are better than the others and which product it works together with. The only thing I see is that I needs to work with SAML 2.0.

Configuration examples with specific combinations of Identity Providers and Service Providers:

Okta and Office 365: sk134192
Okta and G Suite: sk136993
Microsoft AD FS and Office 365: sk133692
Microsoft AD FS and G Suite: sk132716
Microsoft Azure AD and G Suite: sk137853
Centrify and Office 365: sk144212

Please if anyone can directly me in the right directly. it would be appreciated 🙂

Thanks

Re: CG SaaS - What are the recommended MFA solution

Abigael_Levy — Tue, 19 Mar 2019 08:05:52 GMT

Hi @Kim_Moberg,

CloudGuard SaaS can support integration with any Identity Provider supporting the SAML 2.0 protocol. We do have a limitation today which is that we do not dot support the combinations Azure AD/Office 365 and Google Identity Provider/G suite. We are working on a technical solution to support those combinations, particularly partnering with Microsoft to support Azure AD with Office 365. We unfortunately do not have an ETA for resolution at this time.

If the Identity pPovider you are using is not available in the Add Identity Provider wizard in the configuration screen of Identity Protection, please reach out to me directly at abigaels@checkpoint.com. It does not mean your Identity provider is not supported by the solution. The SKs you referred to are only example for common cases of deployment.

With regards to which Identity provider is better, this is not something I can advise on, them being external systems that come with their own pro and cons depending on your expectations for an Identity Provider. I just want to reiterate that the one you select will not make a difference for your integration with CloudGuard SaaS.

Best regards,

Abigael

topic Re: CG SaaS - What are the recommended MFA solution in Email and Collaboration

CG SaaS - What are the recommended MFA solution

Re: CG SaaS - What are the recommended MFA solution