Cortex XSOAR comes out-of-the-box with an administrator user (username: “admin”) configured as a Default Administrator. You can disable this user and use instead a SAML authenticated user as the default administrator.
Add a SAML user as the default administrator.
Log into Cortex XSOAR as the Default Admin user.
Navigate to→ → and select a SAML user.
Select Set as Default Admin.
Log in as SAML user you set as default administrator in step 1 and do the following:
Navigate to→ → and select the
Uncheck the Set as Default Admin and click Save.
adminagain and click Disable.