SAML-based firewall authentication

You can authenticate via SAML-based access profiles using your organization's identity provider (IdP) for firewall authentication. This method generates SAML requests and processes SAML assertions, enhancing the security and flexibility of user authentication. The integration supports single sign-on (SSO) using HTTP Redirect and HTTP POST SAML bindings, providing benefits such as improved security, and reduced password management. Use the command access-profile profile-name under set security policies from-zone zone-name to-zone zone-name policy policy-name then permit firewall-authentication user-firewall to enable SAML based captive portal authentication. 

Use the command set access firewall authentication user-firewall default-ssl-termination-profile default-ssl-termination-profile to apply a default SSL termination profile. Enable this configuration to enforce security for all access profiles.