SAML SLO is supported for which two firewall features? (Choose two.)
SAML SLO is supported for which two firewall features? (Choose two.)
SAML Single Logout (SLO) is supported for the GlobalProtect Portal and the WebUI features of a firewall. SLO allows users to log out of all sessions across different systems that use the same SAML Identity Provider (IdP). Administrators can configure SLO for managing user sessions in the WebUI, which is the web-based interface, and for GlobalProtect, which provides secure access to enterprise resources. CaptivePortal and CLI do not support SAML SLO.
Agree with Anoopmp: A and C SSO is available to administrators who access the web interface and to end users who access applications through GlobalProtect or Captive Portal. SLO is available to administrators and GlobalProtect end users, but not to Captive Portal end users. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/authentication/authentication-types/saml
A, C are the correct answer as it is saying SLO, not SSO https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/authentication/configure-saml-authentication https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/authentication/configure-saml-authentication.html
A and C.
A & C are correct: "You cannot enable SLO for Authentication (Captive) Portal users." https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/device/device-server-profiles-saml-identity-provider
AC ! , Ive just checked it on my fw (panos v10)
AC https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/authentication/configure-saml-authentication SLO is available to administrators and GlobalProtect end users, but not to Authentication Portal end users.
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/authentication/configure-saml-authentication
A and C. Not B!!!!! Don't' mess SSO and SLO: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/authentication/configure-saml-authentication SSO is available to administrators and to GlobalProtect and Authentication Portal end users. SLO is available to administrators and GlobalProtect end users, but not to Authentication Portal end users. Administrators can use SAML to authenticate to the firewall web interface, but not to the CLI.
I am using SAML SLO for production Firewall, and it is definitely Global Protect and WebUI
Correct answer is AC this should be corrected
A and c is the correct. \Administrators cannot use SAML to authenticate to the CLI on the firewall or Panorama. You cannot use SAML authentication profiles in authentication sequences.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/authentication/authentication-types/saml
Correct answer is A and C
A and C correct
A and C. (its SLO) SSO is available to administrators who access the web interface and to end users who access applications through GlobalProtect or Captive Portal. SLO is available to administrators and GlobalProtect end users, but not to Captive Portal end users.
Answer is A C, https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/authentication/authentication-types/saml