

See Delegate application management for more information.

Selecting this option also selects the View permission.Īdditionally, a user in a role with the Application Management administrative right can enable this permission to allow other users or roles (without the Application Management right) to administer the application. Users can modify application settings and application sets. Refer to the following table for more information about applications-specific permissions. Change the permissions if you want to add additional control or you prefer not to automatically deploy the application. Select the desired permissions, then click Save.ĭefault permissions automatically deploy the application to the User Portal if the Show in user app list option is selected on the Settings page. The added object appears on the Permissions page with View, Run, and Automatically Deploy permissions selected by default. Select the user(s), group(s), or role(s) that you want to give permissions to, then click Add. The Select User, Group, or Role window appears. Go to Account Mapping, then select Account Mapping Script and enter the following script into the field: LoginUser.Username = LoginUser.Shortname. Go to SAML Response and add the following attributes.Īccess Domain > LoginUser.EffectiveGroupDNs You will need this file when Palo Alto Networks SAML Single Sign-On (SSO).

In the Identity Provider Configuration area of the Trust page, expand the certificate area and select the certificate that you want to use for the application, then click Download.Ĭlick Download Identity Provider Metadata and save it on your computer. The Palo Alto Networks application opens to the Settings page. In the Add Web App screen, click Yes to confirm.Ĭlick Close to exit the Application Catalog. On the Search tab, enter Palo Alto Networks in the Search field and click the search icon. In the Admin Portal, select Apps > Web Apps, then click Add Web Apps.
