GUARD EVERY GATEWAY
Know who enters.
Loading identity configuration…
Sign in to the console first, then return here to configure identity.
Open sign-inSAML sign-in
Use these values in a Microsoft Entra enterprise application. Sign both the response and assertion using SHA-256. Start sign-in from the console.
Test SAML administrator sign-in →Successful sign-in by an active SCIM-provisioned administrator permanently switches this console to SAML-only access and ends setup-key sessions. Finish provisioning and assign your administrator first.
SCIM provisioning
Provision only assigned users from Entra. Map externalId to objectId. Provisioned users receive no console administrator access automatically.
Copy this token into Entra’s Secret Token field. It appears only once. Generating another token invalidates the previous token immediately.
Administrator access
Grant access only after the account has been provisioned by SCIM. Deactivation or removing access ends existing console sessions on their next request.