Dell Threat Defense Admin Guide Custom Authentication implementation instructions

Affected Products:

• Dell Threat Defense

1. Log in to your Azure account and create a new Active Directory.
   1. Click Browse (bottom of the left navigation pane).
      
   2. Click Active Directory.
   3. Click New (lower-left).
      
   4. Click Directory > Custom Create. Then Add directory window displays.
   5. Enter the directory information (Name, Domain Name, and Country or Region), then click the check mark to save.
   6. Select the directory, then click Add User to add users to this active directory.
      Note: The username in the active directory must match the username in Threat Defense.
2. Add the application to your organization.
   1. Click Add (lower-middle).
   2. Click Add an application that my organization is developing.
   3. Type a name, ensure that Web Application and Web API are selected, then click Next (arrow).
   4. For a Sign-on URL, use the following (based on your region):
      • AU: https://dellthreatdefense-au.cylance.com/EnterpriseLogin/ConsumeSaml
      • EU: https://dellthreatdefense-eu.cylance.com/EnterpriseLogin/ConsumeSaml
      • US: https://dellthreatdefense.cylance.com/EnterpriseLogin/ConsumeSaml
   5. For App ID URI, use the following (based on your region):
      • AU: https://dellthreatdefense-au.cylance.com
      • EU: https://dellthreatdefense-eu.cylance.com
      • US: https://dellthreatdefense.cylance.com
   6. Click Save (check mark).
3. Click View Endpoints (bottom-middle).
4. Copy the X.509 certificate.
   1. Copy the Federation Metadata Document URL, paste it into a new browser tab, then press Enter. The XML file displays in the browser tab.
      
   2. Copy the X509 Certificate and paste it into a text document.
      
   3. Close the XML file browser tab.
      
   4. Copy the SAML-P Sign-on Endpoint URL and paste it into a text document.
   5. Log in to the Cylance Console.
   6. Go to Settings > Applications.
   7. Select Custom Authentication, under Integration.
   8. Select Azure from the provider list.
   9. Paste the Azure certificate (X.509 certificate, obtained in step 4).
   10. Add the SAML-P Sign-on Endpoint URL (provided by Azure, obtained in step D).
   11. Click Save.

Troubleshooting

If your Microsoft Azure authentication does not work when attempting to log in to the Cylance Console:

• Check your Microsoft Azure and Threat Defense Console settings to ensure that the settings are entered correctly.
• In Step 2, try configuring the App ID URI with the same information as the Sign-on URL (example: https://dellthreatdefense.cylance.com/EnterpriseLogin/ConsumeSaml)

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.