Can multiple SAML IdP(s) be configured in PAM?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

You are planning to implement MFA for logon to PAM appliances using SAML authentication and would like to know if it is be possible to have more than one MFA provider as SAML Identity Provider (IdP).

Resolution

You can configure integration with multiple SAML IdPs on PAM UI page Configuration > Security > SAML > SP Configuration > Configured Remote SAML IdP per information on documentation page Configure PAM as a SAML Service Provider (SP).

When clicking on the Single Sign-On button PAM users will be presented with the list of configured IDP(s), and will need to select the appropriate one before clicking on the Login button.