Redirecting to the IdP login page using the CLI

Prev Next

Enable redirecting to the IdP login page or restore default SAML behavior using the CLI.

Prerequisites
  • Admin access to the appliance.

To enable redirecting to the IdP login page using the CLI:

  1. Log in to the appliance CLI.

  2. Go to CLI configuration mode:

    hostname # enable
    hostname # configure terminal
  3. Allow users to directly log in from the IdP page.

    hostname (config) # aaa authentication saml web policy required-force
  4. Verify your change:

    hostname (config) # show aaa authentication saml
  5. Save your changes:

    hostname (config) # write memory

To disable the redirecting policy:

  1. Log in to the Email Security — Server CLI.

  2. Go to CLI configuration mode:

    hostname # enable
    hostname # configure terminal
  3. Disable the existing policy and restore it to the default SAML behavior.

    hostname (config) # no aaa authentication saml web policy
  4. Verify your change:

    hostname (config) # show aaa authentication saml
  5. Save your changes:

    hostname (config) # write memory