Remote Access VPN with SAML - Always login with same user

[Blason_R]

Hi Team,

I am succeeded configuring SAML authentication with Check Point Remote Access VPN. However concern here is; whenever a user tries to login it does not ask for username and password. It takes up same username and password which was entered previously.

How can we overcome this situation? So that if the same system is shared with multiple users in shifts then this will cause an issue.

So eventually I am looking for whenever user tries to connect agent can divert us to SAML portal; gets authenticated and then proceed.

Any clue?

TIA

Blason R

[Chris_Atkinson · Accepted solution]

Maybe this discussion will be helpful for you:

https://community.checkpoint.com/t5/Remote-Access-VPN/Azure-SAML-Auth-forceAuthn-true/td-p/181467#M9...

[Blason_R]

Thanks man - Let me have a look at it.

[PhoneBoy]

This sounds like a use case for forceAuthn=true: https://support.checkpoint.com/results/sk/sk180948
Note that it is officially unsupported and may need to be re-applied on any upgrade.

[Blason_R]

Yes - that worked as expected.

Thanks folks