Paloalto Networks XSOAR-Engineer Question Answer
Where does the mapping of user groups to SAML groups take place?.
Cortex Gateway.
Tenant.
Customer Support Portal.
Palo Alto Networks Hub.
The SSO (SAML) configuration is performed inside each Cortex XSOAR tenant, under the Authentication settings.
Group mapping (SAML group → XSOAR role/group) is managed at the tenant level, not in the Hub, Gateway, or Support Portal.
TESTED 11 Feb 2026
Copyright © 2014-2026 ACE4Sure. All Rights Reserved