Enable redirecting to the IdP login page or restore default SAML behavior using the CLI.
Prerequisites
Admin access to the appliance.
To enable redirecting to the IdP login page using the CLI:
Log in to the appliance CLI.
Go to CLI configuration mode:
hostname # enable hostname # configure terminal
Allow users to directly log in from the IdP page.
hostname (config) # aaa authentication saml web policy required-forceVerify your change:
hostname (config) # show aaa authentication samlSave your changes:
hostname (config) # write memory
To disable the redirecting policy:
Log in to the Email Security — Server CLI.
Go to CLI configuration mode:
hostname # enable hostname # configure terminal
Disable the existing policy and restore it to the default SAML behavior.
hostname (config) # no aaa authentication saml web policyVerify your change:
hostname (config) # show aaa authentication samlSave your changes:
hostname (config) # write memory