topic SAML Authentication for smartphones client in SASE and Remote Access

SAML Authentication for smartphones client

Ob1lan — Tue, 08 Feb 2022 09:23:38 GMT

Hi,

We successfully enable SAML authentication with Okta for our Windows and MacOS clients. This is working great, and allow us to have MFA for our Remote Access users.

However, it appears some of our users also connect to our network using their smartphones (Android & iOS) and Capsule app. Is there a way we could provide SAML authentication to those devices ?

If that's not (yet) possible, can we lock Windows & MacOS clients to the authentication option using SAML, and restrict the use of 'username/password' only to Capsule clients ?

Thanks in advance.

Regards.

Re: SAML Authentication for smartphones client

PhoneBoy — Tue, 08 Feb 2022 23:26:41 GMT

SAML Support for the Android/iOS VPN client is not possible at the moment and would require an RFE.
If you have this requirement, I recommend bringing it up with your local Check Point office.

As for restricting username/password to a specific type of client, I don’t believe you can do that per-se.
Through Access Roles you can definitely control who can go where based on the type of client used.

Re: SAML Authentication for smartphones client

Eric_Smith — Wed, 09 Feb 2022 22:28:28 GMT

As SAML Support for Android / iOS VPN client is not possible at the moment, would it be a fair assumption that the Capsule Connect VPN for Windows 10 also does not support SAML at this time? If not, will that require an RFE also?

Re: SAML Authentication for smartphones client

biskit — Sun, 20 Mar 2022 13:51:00 GMT

Real shame this doesn't work for Capsule. I have exactly the same problem... works a treat for Mobile Access and the Endpoint VPN client on Windows (Azure AD with Microsoft Authenticator), but I have around 70 Capsule (Android) users who need a different auth method 😞

I've asked my local SE to raise an RFE for this.

Re: SAML Authentication for smartphones client

lrossi89 — Wed, 07 Sep 2022 10:13:22 GMT

any news ?

Re: SAML Authentication for smartphones client

Chiko_Phiri — Mon, 03 Oct 2022 07:04:57 GMT

How did it go? I have the same requirement for Android and IOS.

Re: SAML Authentication for smartphones client

lrossi89 — Mon, 03 Oct 2022 07:09:47 GMT

The support told me that it is not currently supported for Android and iOS

Re: SAML Authentication for smartphones client

biskit — Mon, 03 Oct 2022 07:20:03 GMT

Thanks for the reminder. I didn't hear back from my SE so I've just ask for an update.