https://community.checkpoint.com/t5/SASE-and-Remote-Access/Multiple-login-methods-disable-user-pass-method-for-some-users/m-p/185942#M4738 <P>If the user can successfully authenticate with the chosen method, they will be allowed to use it.<BR />I suspect you'll have to remove the method entirely.</P> Fri, 07 Jul 2023 23:03:40 GMT PhoneBoy 2023-07-07T23:03:40Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Multiple-login-methods-disable-user-pass-method-for-some-users/m-p/185941#M4737 <P>Hi guys,</P><P>I have my firewall configured with three RAS methods, two using multi-factor authentication (radius and SAML) and the old "Username_Password" method which I need to dismiss asap.</P><P>Since I can't just remove the legacy method for everyone, I' m wondering if it would be possible to block this way to connect for only some users, let's say the users in a specific AD group.</P><P>I made some tries but since my test user is in the group allowed to connect with MFA, it seems that if I select the legacy method from the Endpoint Connect client it will be accepted anyway and it can connect.</P><P>Is this possible or I have to completely remove the method from the firewall?</P><P>Thanks</P><P>&nbsp;</P> Fri, 07 Jul 2023 21:40:34 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Multiple-login-methods-disable-user-pass-method-for-some-users/m-p/185941#M4737 AkiYa 2023-07-07T21:40:34Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Multiple-login-methods-disable-user-pass-method-for-some-users/m-p/185942#M4738 <P>If the user can successfully authenticate with the chosen method, they will be allowed to use it.<BR />I suspect you'll have to remove the method entirely.</P> Fri, 07 Jul 2023 23:03:40 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Multiple-login-methods-disable-user-pass-method-for-some-users/m-p/185942#M4738 PhoneBoy 2023-07-07T23:03:40Z