{"id":2521,"date":"2022-10-26T15:37:52","date_gmt":"2022-10-26T12:37:52","guid":{"rendered":"https:\/\/artem.services\/?p=2521"},"modified":"2022-10-26T15:37:52","modified_gmt":"2022-10-26T12:37:52","slug":"palo-alto-vm-series-firewall-globalprotect-aws-saml","status":"publish","type":"post","link":"https:\/\/artem.services\/?p=2521","title":{"rendered":"Palo Alto VM-Series Firewall: GlobalProtect &#8212; AWS SAML"},"content":{"rendered":"<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2328\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo.png\" alt=\"\" width=\"2560\" height=\"465\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo.png 2560w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-300x54.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-1024x186.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-768x140.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-1536x279.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-2048x372.png 2048w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-954x173.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/09\/palo-alto-logo-1354x246.png 1354w\" sizes=\"(max-width: 2560px) 100vw, 2560px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>GlobalProtect \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 SAML 2.0 IdP. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 AWS SSO.<\/p>\n<h3>AWS<\/h3>\n<blockquote><p>\u041f\u0435\u0440\u0435\u0434 \u0442\u0435\u043c \u043a\u0430\u043a \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c SAML IdP \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d <a href=\"https:\/\/aws.amazon.com\/directoryservice\/\" target=\"_blank\" rel=\"noopener\">AWS Directory Service<\/a><\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p>\u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c &quot;<strong>IAM Identity Center<\/strong>&quot; -&gt; &quot;<strong>Application assignments<\/strong>&quot; -&gt; &quot;<strong>Application<\/strong>&quot;<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2522\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.41.png\" alt=\"\" width=\"538\" height=\"756\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.41.png 538w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.41-213x300.png 213w\" sizes=\"(max-width: 538px) 100vw, 538px\" \/><\/p>\n<p>\u0418 \u043a\u043b\u0438\u043a\u0430\u0435\u043c &quot;<strong>Add Application<\/strong>&quot;<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2523\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49.png\" alt=\"\" width=\"2068\" height=\"356\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49.png 2068w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-300x52.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-1024x176.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-768x132.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-1536x264.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-2048x353.png 2048w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-954x164.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.19.49-1354x233.png 1354w\" sizes=\"(max-width: 2068px) 100vw, 2068px\" \/><\/p>\n<p>\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f GlobalProtect \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043d\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u044d\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438 \u043a\u043b\u0438\u043a\u0430\u0435\u043c &quot;<strong>Next<\/strong>&quot;<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2524\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11.png\" alt=\"\" width=\"2210\" height=\"776\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11.png 2210w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-300x105.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-1024x360.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-768x270.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-1536x539.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-2048x719.png 2048w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-954x335.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.27.11-1354x475.png 1354w\" sizes=\"(max-width: 2210px) 100vw, 2210px\" \/><\/p>\n<p>\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0438\u043c\u044f \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2525\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13.png\" alt=\"\" width=\"1594\" height=\"602\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13.png 1594w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13-300x113.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13-1024x387.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13-768x290.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13-1536x580.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13-954x360.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.32.13-1354x511.png 1354w\" sizes=\"(max-width: 1594px) 100vw, 1594px\" \/><\/p>\n<p>\u0414\u0430\u043b\u0435\u0435 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 &quot;<strong>Application properties<\/strong>&quot; \u0432 \u043f\u043e\u043b\u0435 &quot;<strong>Application start URL<\/strong>&quot; \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n<blockquote><p>https:\/\/<strong>YOUR_GP_DOMAIN<\/strong>\/global-protect\/getsoftwarepage.esp<\/p><\/blockquote>\n<p>\u0414\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0441 \u043f\u043e\u0440\u0442\u0430\u043b\u0430 AWS SSO \u043c\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043f\u0430\u0434\u0430\u0442\u044c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f GlobalProtect \u043a\u043b\u0438\u0435\u043d\u0442\u0430<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2526\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07.png\" alt=\"\" width=\"1586\" height=\"626\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07.png 1586w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07-300x118.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07-1024x404.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07-768x303.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07-1536x606.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07-954x377.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.07-1354x534.png 1354w\" sizes=\"(max-width: 1586px) 100vw, 1586px\" \/><\/p>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 &quot;<strong>Application metadata<\/strong>&quot; \u0432 \u043f\u043e\u043b\u0435 &quot;<strong>Application ACS URL<\/strong>&quot; \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n<blockquote><p>https:\/\/<strong>YOUR_GP_DOMAIN<\/strong>:443\/SAML20\/SP\/ACS<\/p><\/blockquote>\n<p>\u0418 \u0432 \u043f\u043e\u043b\u0435 &quot;<strong>Application SAML audience<\/strong>&quot;:<\/p>\n<blockquote><p>https:\/\/<strong>YOUR_GP_DOMAIN<\/strong>:443\/SAML20\/SP<\/p><\/blockquote>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2527\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47.png\" alt=\"\" width=\"1590\" height=\"638\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47.png 1590w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47-300x120.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47-1024x411.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47-768x308.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47-1536x616.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47-954x383.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.33.47-1354x543.png 1354w\" sizes=\"(max-width: 1590px) 100vw, 1590px\" \/><\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c <strong>SAML Metadata<\/strong> \u0444\u0430\u0439\u043b, \u0441\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u0441\u044f \u0432\u043d\u0438\u0437 \u0438 \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c &quot;<strong>Submit<\/strong>&quot;<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2528\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13.png\" alt=\"\" width=\"1574\" height=\"322\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13.png 1574w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13-300x61.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13-1024x209.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13-768x157.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13-1536x314.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13-954x195.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.42.13-1354x277.png 1354w\" sizes=\"(max-width: 1574px) 100vw, 1574px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0443\u0436\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u0430\u0442\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 &quot;<strong>Actions<\/strong>&quot; \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c &quot;<strong>Edit attribute mapping<\/strong>&quot;<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2530\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53.png\" alt=\"\" width=\"2218\" height=\"554\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53.png 2218w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-300x75.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-1024x256.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-768x192.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-1536x384.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-2048x512.png 2048w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-954x238.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-14.49.53-1354x338.png 1354w\" sizes=\"(max-width: 2218px) 100vw, 2218px\" \/><\/p>\n<p>\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442:<\/p>\n<ul>\n<li>Value: ${user.subject}<\/li>\n<li>Format: emailAddress<\/li>\n<\/ul>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2529\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08.png\" alt=\"\" width=\"2206\" height=\"808\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08.png 2206w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-300x110.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-1024x375.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-768x281.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-1536x563.png 1536w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-2048x750.png 2048w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-954x349.png 954w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-13.45.08-1354x496.png 1354w\" sizes=\"(max-width: 2206px) 100vw, 2206px\" \/><\/p>\n<p>\u041d\u0430 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b AWS \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.<\/p>\n<h3>Firewall<\/h3>\n<p>\u0418\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c <strong>SAML Metadata<\/strong> \u0444\u0430\u0439\u043b, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0443 &quot;<strong>Device<\/strong>&quot; -&gt; &quot;<strong>Server Profiles<\/strong>&quot; -&gt; &quot;<strong>SAML Identity Provider<\/strong>&quot; \u0438 \u0432 \u043b\u0435\u0432\u043e\u043c \u043d\u0438\u0436\u043d\u0435\u043c \u0443\u0433\u043b\u0443 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c &quot;<strong>Import<\/strong>&quot;<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2532\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.22.21.png\" alt=\"\" width=\"986\" height=\"574\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.22.21.png 986w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.22.21-300x175.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.22.21-768x447.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.22.21-954x555.png 954w\" sizes=\"(max-width: 986px) 100vw, 986px\" \/><\/p>\n<blockquote><p>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 &quot;V<strong>alidate Identity Provider Certificate<\/strong>&quot; &#8212; \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d<\/p><\/blockquote>\n<p>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c <strong>Authentication Profile<\/strong>, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0443 &quot;<strong>Device<\/strong>&quot; -&gt; &quot;<strong>Authentication Profile<\/strong>&quot; \u0438 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c &quot;<strong>Add<\/strong>&quot;. \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0438\u043c\u044f \u0438 \u0432 \u043f\u043e\u043b\u0435 &quot;<strong>IdP Server Profile<\/strong>&quot; \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0448\u0430\u0433\u0435, \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2533\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.37.png\" alt=\"\" width=\"1188\" height=\"874\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.37.png 1188w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.37-300x221.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.37-1024x753.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.37-768x565.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.37-954x702.png 954w\" sizes=\"(max-width: 1188px) 100vw, 1188px\" \/><\/p>\n<p>\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0443 &quot;<strong>Advanced<\/strong>&quot; \u0438 \u0432 &quot;<strong>Allow List<\/strong>&quot; \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c &quot;<strong>all<\/strong>&quot;.<\/p>\n<p><img loading=\"lazy\" class=\"alignnone size-full wp-image-2534\" src=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.53.png\" alt=\"\" width=\"1188\" height=\"832\" srcset=\"https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.53.png 1188w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.53-300x210.png 300w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.53-1024x717.png 1024w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.53-768x538.png 768w, https:\/\/artem.services\/wp-content\/uploads\/2022\/10\/Screenshot-2022-10-26-at-15.28.53-954x668.png 954w\" sizes=\"(max-width: 1188px) 100vw, 1188px\" \/><\/p>\n<p>\u041a\u043b\u0438\u043a\u0430\u0435\u043c &quot;<strong>OK<\/strong>&quot; \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0432 \u043f\u0440\u0430\u0432\u043e\u043c \u0432\u0435\u0440\u0445\u043d\u0435\u043c \u0443\u0433\u043b\u0443 \u043a\u043b\u0438\u043a\u0430\u0435\u043c &quot;<strong>Commit<\/strong>&quot;. \u0422\u0435\u043f\u0435\u0440\u044c \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 <strong>Authentication Profile<\/strong> \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 GlobalProtect.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; GlobalProtect \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 SAML 2.0 IdP. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 AWS SSO. AWS \u041f\u0435\u0440\u0435\u0434 \u0442\u0435\u043c \u043a\u0430\u043a \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c SAML IdP \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d AWS Directory Service &nbsp; \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c &quot;IAM Identity Center&quot; -&gt; &quot;Application assignments&quot; -&gt; &quot;Application&quot; \u0418 &hellip; <a href=\"https:\/\/artem.services\/?p=2521\" class=\"more-link\">\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0447\u0438\u0442\u0430\u0442\u044c<span class=\"screen-reader-text\"> &quot;Palo Alto VM-Series Firewall: GlobalProtect &#8212; AWS SAML&quot;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24,42],"tags":[1891,1895,1889,1913],"_links":{"self":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/2521"}],"collection":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2521"}],"version-history":[{"count":1,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/2521\/revisions"}],"predecessor-version":[{"id":2535,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/2521\/revisions\/2535"}],"wp:attachment":[{"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2521"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2521"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2521"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}