Enabling or disabling SAML authentication using the CLI

Enable SAML authentication using the CLI and then perform configuration tasks from the Setting > Authentication tab on the Trellix appliance Web UI.

Note

The authentication Web UI tab displays only after SAML is enabled.

Important

SAML authentication is mutually exclusive with OIDC-based authentication.

Prerequisites

Admin access to the appliance.

To enable SAML using the CLI:

Go to CLI configuration mode:

hostname # enable
hostname # configure terminal

Allow users to log in to the Web UI for SAML authentication.

hostname (config) # aaa authentication saml web policy allowed

Verify your change:

hostname (config) # show aaa authentication saml

Save your changes:
```
hostname (config) # write memory
```

To disable the policy setting of the Web UI for SAML:

Go to CLI configuration mode:

hostname # enable
hostname # configure terminal

Disallow users to log in to the Web UI for SAML authentication.
```
hostname (config) # no aaa authentication saml web policy
```

Verify your change:

hostname (config) # show aaa authentication saml

Save your changes:
```
hostname (config) # write memory
```