IBM Security QRadar SOAR

 View Only
  • 1.  microsoft authenticator for IBM SOAR / Azure AD SAML

    Posted Thu November 11, 2021 11:33 AM
    Hi All, i hope you are doing well, we have a few questing regaring MFA and SAML auth, it is posible to use microsoft authenticator as MFA for IBM SOAR, or DUO is the only posible provider ?
    Sencondly, about Azure AD is it posible to use it within SOAR.

    Best Regards.

    Guillermo


    ------------------------------
    Guillermo Lujan
    ------------------------------


  • 2.  RE: microsoft authenticator for IBM SOAR / Azure AD SAML

    Posted Thu November 11, 2021 06:26 PM
    Edited by Richard Giesige Thu November 11, 2021 06:27 PM

    If you using the application in an SSO format with Microsoft application registration, you should be able to set conditional access rules that require an MFA prompt. This is not done through resilient but through the azure application in AzureAD.

    But you have to be licensed for conditional access from my understanding. 



    ------------------------------
    Richard Giesige
    Security Engineer
    Oshkosh Corporation
    Oshkosh
    ------------------------------



  • 3.  RE: microsoft authenticator for IBM SOAR / Azure AD SAML

    Posted Mon November 15, 2021 07:23 AM
    Thank you Richards.


    BR

    ------------------------------
    Guillermo Lujan
    ------------------------------



  • 4.  RE: microsoft authenticator for IBM SOAR / Azure AD SAML

    Posted Fri November 12, 2021 04:52 AM
    Hi Guillermo,

    DUO is the only provider that is enabled within SOAR. If you want to use another provider then clients can configure SOAR to use SAML at which point the 2FA provider you use is transparent to SOAR.

    I know of clients using Azure, ADFS, IBM, Ping and Okta for SAML.

    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 5.  RE: microsoft authenticator for IBM SOAR / Azure AD SAML

    Posted Mon November 15, 2021 07:24 AM
    Thank you Ben.

    BR

    ------------------------------
    Guillermo Lujan
    ------------------------------



  • 6.  RE: microsoft authenticator for IBM SOAR / Azure AD SAML

    Posted Fri September 02, 2022 10:56 AM
    Hi all,

    Following your messages, We are looking to implement MFA on Resilient but before starting to work on it, I'm would like to kown if SAML v2 is compatible Resilient?

    Thank you guys for your feedbacks

    ------------------------------
    ilias guernane
    ------------------------------