topic Mobile Access authentication scheme restriction in SASE and Remote Access

Mobile Access authentication scheme restriction

Jonathan — Sun, 23 Feb 2020 09:56:42 GMT

Hi,

We're using Mobile Access to let employees connect to the office. We use both Checkpoint mobile with certificate and SSL-VPN with a physical token.

We implemented a new authentication scheme of Username Password (ldap) + DynamicID (sms) and it's working fine.

However, we would like to only allow selected users to be able to use this auth scheme, based on groups from Active Directory.

How can we accomplish that?

Thanks

Re: Mobile Access authentication scheme restriction

PhoneBoy — Tue, 25 Feb 2020 23:37:31 GMT

In order to map a user to a user group, the user must complete authentication first.
Meanwhile, in order to customize the authentication flow per user group, we must know it before authentication completes.
Bit of a "chicken and egg" problem.

Perhaps you can leverage 'Protection Levels' which can bind certain applications to certain authentication methods.