Enable SAML authentication using the CLI and then perform configuration tasks from the Setting > Authentication tab on the Trellix appliance Web UI.
Note
The authentication Web UI tab displays only after SAML is enabled.
Important
SAML authentication is mutually exclusive with OIDC-based authentication.
Prerequisites
Admin access to the appliance.
To enable SAML using the CLI:
Log in to the appliance CLI.
Go to CLI configuration mode:
hostname # enable hostname # configure terminal
Allow users to log in to the Web UI for SAML authentication.
hostname (config) # aaa authentication saml web policy allowedVerify your change:
hostname (config) # show aaa authentication samlSave your changes:
hostname (config) # write memory
To disable the policy setting of the Web UI for SAML:
Log in to the Email Security — Server CLI.
Go to CLI configuration mode:
hostname # enable hostname # configure terminal
Disallow users to log in to the Web UI for SAML authentication.
hostname (config) # no aaa authentication saml web policyVerify your change:
hostname (config) # show aaa authentication samlSave your changes:
hostname (config) # write memory