Security Assertion Markup Language (SAML) is an XML-based, open-standard data format used to exchange authentication and authorization data between parties, specifically between an identity provider (IdP) and a service provider. Set up user authentication using SAML 2.0 and Cloud Identity Engine so that only legitimate Prisma Agent users have access to your services and applications. Authenticated users are associated with configuration rules that define how the Prisma Agent is configured when it is deployed to endpoints.

You can use client certificates or SAML with Cloud Identity Engine as authentication methods for Prisma Agent. (Also available on Prisma Agent Linux 26.3 and later)

Before you begin, Set Up Cloud Identity Engine for Prisma Agent User Authentication and set up an authentication profile.

You can set up SAML authentication depending on the deployment you're using.