Infinity Identity Integration

Infinity IdentityClosed Centralized solution for identity-based security. Aggregate dynamic (for example, login information) identity information from different identity sources, Identity Providers and Check Point products. Supplies information to users (for example, Security Gateway). acts as a unified identity repository across the Check Point ecosystem. In R82, a centralized configuration for Identity Providers lets you define one or more Identity Providers on the Infinity Portal and reuse the IdP configuration on multiple Security Gateways in SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. that have the Identity AwarenessClosed Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. Blade enabled.

How It Works

This example uses Azure but applies to any IdP supported by the Infinity Portal.

  1. A user defined in Azure attempts to access Amazon Web Services.

    Note - If you have more than one IdP configured, the user is redirected to the Captive PortalClosed A Check Point Identity Awareness web portal, to which users connect with their web browser to log in and authenticate, when using Browser-Based Authentication. to select an IdP.

  2. Upon successful authentication through the IdP, the user is granted access to Amazon based on your predefined ruleClosed Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session..

Prerequisites

  • Access to one of these supported cloud platforms.

  • An app on your chosen platform with permissions to create groups and assign users.

  • SmartConsole is connected to the Infinity Portal.

Supported IdPs

  • Microsoft ADFS

  • Microsoft Entra ID

  • Okta

  • RADIUS

  • OneLogin

  • Ping Identity

  • Google Workspace

  • Duo

  • Generic SAML Server

Important - Only the EU and US regions are supported in Infinity Identity configurations.

How to Configure a Centralized Identity Provider

Before you begin, log in to SmartConsole, the Infinity Portal, and your IdP.