How to Disable Credential Enforcement Status for a User-ID Agent

How to Disable Credential Enforcement Status for a User-ID Agent

2427
Created On 04/23/25 22:29 PM - Last Modified 05/01/25 15:13 PM


Objective


Disable the Credential Enforcement Status for a User-ID agent



Environment


  • User-ID agent
  • Credential Agent


Procedure


  1. On the RODC where you installed the User-ID agent, launch the User-ID Agent application. 
  2. Select Setup and edit the Setup section.
  3. Select the Credentials tab. This tab only displays if you have already installed the User-ID Agent Credential Service. 
  4. Credential Agent
  5. Ensure that both "Import from File" and "Import from User-ID Credential Agent" are unchecked. 
  6. To ensure that you have indeed disabled the credential enforcement on the user ID agent, issue the CLI command from the firewall: 
    > show user user-id-agent state <name of the UIA> | match Agent\|Status
  7. Example output:
    > show user user-id-agent state rodc-1 | match Agent\|Status
    Agent: rodc-1(vsys: vsys1) Host: rodc-1.domain.lab(10.1.1.254):5007
            Status                                            : conn:idle
                 Credential Enforcement Status : Disabled
    


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000TN6PKAW&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language