Authentication

Forcepoint Data Security Cloud administrators can select from Local, LDAP, or SAML identity providers.

Use the Authentication drop down to select from available providers.

1. On the left Navigation Pane, navigate to Settings > Authentication.

   

2. Toggle Always check for local user to either enable or disable to allow authentication using local user.
3. From the Default Identity Provider drop-down, select the identity provider from the drop-down.
   Available options are:

   • Local - Select the Local option to add and manage users locally inside Forcepoint Data Security Cloud.
   • LDAP - Select the LDAP option to setup Active Directory sync to provision and to authenticate users.
   • SAML - Select the SAML option to leverage SAML 2.0 user authentication against an already deployed IAM product which provides Single Sign-On (SSO). Authentication requests for users in the configured domain are sent to the Identity Provider (IdP).

     Forcepoint Data Security Cloud auto-creates users upon successful SAML authentication to an external IdP. The tenant administrator can then assign any role to the created SAML user.

4. If LDAP or SAML is selected, you need to also provide specific service in the IDP drop-down.