topic Re: Identity Awareness User details in SASE and Remote Access

Identity Awareness User details

Sanjay_S — Wed, 13 Oct 2021 12:50:08 GMT

Hi All,

How to fetch user details from the Azure AD which is used for SAML authentication? Need to limit access to few users and few need complete admin level access when they login using the SAML authentication. Please suggest as LDAP account unit doesn't have Azure AD as an option to create one.

Regards,

Sanjay S

Re: Identity Awareness User details

Chris_Atkinson — Wed, 13 Oct 2021 13:34:41 GMT

R81 and above provide Azure Active Directory support for Identity Awareness - Use the Identity Awareness Access role picker to authenticate and authorize Azure AD users and groups.

Re: Identity Awareness User details

PhoneBoy — Wed, 13 Oct 2021 14:00:02 GMT

Even with R80.40 you can manually create the relevant Identity Tags that match exactly how the groups are created in AzureAD.
But yes, R81 has GraphAPI support, which makes all this easier.

Re: Identity Awareness User details

Sanjay_S — Wed, 13 Oct 2021 15:07:22 GMT

Thanks Chris,

Any document that helps me in this configuration please share.

Re: Identity Awareness User details

NicklasBargell — Thu, 09 Dec 2021 09:10:27 GMT

Hi Sanjay_S,

It's documented in the Identity Awareness Admin Guide for R81, and there is also a great video by @Shay_Levin you can find here:

https://community.checkpoint.com/t5/How-To-Videos/R81-Identity-Awareness-Integration-with-Azure-AD/m-p/108390#M238

Regards,

Nicklas.