Identity provider accounts and Security Cloud Control user records

An identity provider and Security Cloud Control user record relationship is an authentication model that

  • requires, to log in to Security Cloud Control, an account with a SAML 2.0-compliant identity provider (IdP), a multi-factor authentication provider, and a user record in Security Cloud Control.

  • authenticates the user based on IdP credentials and a second factor, and

  • maps the IdP user ID to an existing user record on a tenant in Security Cloud Control, and when Security Cloud Control finds a match, the user logs in to that tenant.

Identity details and provider options

The IdP account contains the user's credentials, and the IdP authenticates the user based on those credentials. Multi-factor authentication provides an added layer of identity security.

The Security Cloud Control user record primarily contains the username, the Security Cloud Control tenant with which they are associated, and the user's role.

Unless an enterprise has its own single sign-on identity provider, the identity provider is Cisco Security Cloud Sign On. Cisco Security Cloud Sign On uses Duo for multi-factor authentication.

Organizations can integrate their own IdP with Security Cloud Control if they choose.