Configure Explicit Proxy with SAML (Panorama)

1. Set up Explicit Proxy.
2. (Optional) Configure Cloud Identity Engine authentication for Explicit Proxy.
3. Depending on your Prisma Access version and your dataplane version, configure either a single policy rule or several.

   Version Requirements	Configuration
   Prisma Access 5.1 or a later version and a dataplane of PAN-OS 10.2.10 or a later version.	Configure a security policy rule for pre-authentication user traffic. Select the Explicit_Proxy_Device_Group. Create an application filter using the Web App tag. Select PoliciesPre RulesAdd. Create the rule. Add the rule. Give it a descriptive name. For example, allow-pre-auth Under the Application tab, Add the Web App application filter. Under the Source tab, Add known-user.
   All other Prisma Access and dataplane versions.	Configure security policy rules according to your needs and internet gateway security policy best practices.

4. Commit the configuration.