topic Re: Remote Access VPN with SAML - Always login with same user in General Topics

Remote Access VPN with SAML - Always login with same user

Blason_R — Sat, 14 Oct 2023 04:13:42 GMT

Hi Team,

I am succeeded configuring SAML authentication with Check Point Remote Access VPN. However concern here is; whenever a user tries to login it does not ask for username and password. It takes up same username and password which was entered previously.

How can we overcome this situation? So that if the same system is shared with multiple users in shifts then this will cause an issue.

So eventually I am looking for whenever user tries to connect agent can divert us to SAML portal; gets authenticated and then proceed.

Any clue?

TIA

Blason R

Re: Remote Access VPN with SAML - Always login with same user

Chris_Atkinson — Sat, 14 Oct 2023 23:24:55 GMT

Maybe this discussion will be helpful for you:

https://community.checkpoint.com/t5/Remote-Access-VPN/Azure-SAML-Auth-forceAuthn-true/td-p/181467#M9177

Re: Remote Access VPN with SAML - Always login with same user

Blason_R — Mon, 16 Oct 2023 04:15:47 GMT

Thanks man - Let me have a look at it.

Re: Remote Access VPN with SAML - Always login with same user

PhoneBoy — Mon, 16 Oct 2023 17:59:53 GMT

This sounds like a use case for forceAuthn=true: https://support.checkpoint.com/results/sk/sk180948
Note that it is officially unsupported and may need to be re-applied on any upgrade.

Re: Remote Access VPN with SAML - Always login with same user

Blason_R — Tue, 17 Oct 2023 01:12:37 GMT

Yes - that worked as expected.

Thanks folks