Managed Defense troubleshooting

The Mandiant Managed Defense (MD) integration uses local authentication. If Single Sign-On (SSO) is required, authentication fails and MD service delivery can be interrupted.

To resolve this problem:

Check whether SSO is required:

hostname (config) # show aaa authentication oidc

If the Web Policy field is required, change the authentication mode to "allowed":
```
hostname (config) # aaa authentication oidc web policy allowed
```

Example

The following example changes the SSO authentication mode to "allowed."

hostname (config) # show aaa authentication oidc
OIDC based authentication settings:

  Web Policy                   : required
  ID-token field for username  : oidc-preferred-username 

hostname (config) # aaa authentication oidc allowed
hostname (config) # show aaa authentication oidc
OIDC based authentication settings:

  Web Policy                   : allowed
  ID-token field for username  : oidc-preferred-username