Cortex XSOAR comes out-of-the-box with an administrator user (username: “admin”) configured as a Default Administrator. You can disable this user and use instead a SAML authenticated user as the default administrator.
Add a SAML user as the default administrator.
Log into Cortex XSOAR as the Default Admin user.
Navigate to
+ + and select a SAML user.Click Roles.
Select Set as Default Admin.
Click Save.
Log out.
Log in as SAML user you set as default administrator in Step 1 and do the following:
Navigate to
+ + and select theadmin
user.Click Roles.
Uncheck the Set as Default Admin and click Save.
Select
admin
again and click Disable.