User roles that are required to enable a Third-Party Identity Provider in the Customer Support Portal and through Common Services
976
Created On 10/11/24 12:56 PM - Last Modified 10/23/24 08:27 AM
Question
What are the user roles that I need to configure a Third-Party Identity Provider in the Customer support Portal and Common Services?
Environment
Customer Support Portal (CSP)
Common Services (SCM)
Answer
A Third-Party Identity Provider (3rd Party IDP) can be activated in both the Customer Support Portal (CSP) and through Common Services (SCM). These two processes will continue to work in parallel.
How to enable a Third-Party Identity Provider in CSP
How to enable a Third-Party Identity Provider in SCM
To configure or enable a 3rd Party IDP in CSP, you need to have the Domain Administrator role.
On the other hand, enabling a 3rd Party IDP in SCM is not linked to a tenant-based role in SCM because the user has to go through DNS verification.
Additional details about DNS verification
Additional Information
Regardless of which platform you use to enable the 3rd Party IDP, Domain Administrators will continue to use Palo Alto credentials to access our resources.