SAML Authentication for Gaia Administrators?

[Timothy_Hall]

Does R82 support SAML authentication for Gaia administrators (not SmartConsole administrators or RAS VPN users)?  It appears the answer is no...

[PhoneBoy]

Not as far as I know.
However, it appears we now support MFA for local Gaia OS users in R82 and R81.20 JHF 96+ using Google Authenticator: https://support.checkpoint.com/results/sk/sk181854 

[Alex-]

A couple of caveats, as noted in another thread:

-This works for CLISH, WebUI and expert but does after JHF upgrade, for instance from Take 98 to take 99, this stops working for CLISH and Expert, WebUI stays with 2FA. TAC case open

- The configuration state for administrators does not appear in the output of "show configuration", nor the enrolment status of the 2FA code, making this feature harder to evaluate when using automated GAIA auditing tools

- The toggle for this feature is "yes/no" when in GAIA this is usually "on/off", changing again the logic of argument evaluation, should it become visible

[the_rock]

You referring to attached?

Andy