Set up authentication

In Cortex XSOAR 8.10 On-prem, configure local or SSO authentication.

You can create users locally or by using SSO in the tenant. Users authenticate by doing one of the following:

• Authenticate locally

  After you create users, they authenticate using their username and password. For more information, see Create users in Cortex XSOAR.
• SAML single sign-on

  Users can be authenticated using your IdP provider such as Okta, Ping, or Microsoft Entra ID. You can use any IdP that supports SAML 2.0.

After you have created users, add them to user groups or assign roles directly.

SSO has the following advantages:

• Enforces multi-factor authentication (MFA) and any conditional access policies on the user login at the IdP before granting a user access to Cortex XSOAR.
• Maps SAML group memberships to user groups and roles, allowing you to manage role-based access control.
• Removes access to Cortex XSOAR when a user is removed or disabled in the IdP.