Skip to main content

McAfee MVISION ePO

Introduction#

Acceptto™ SSO for McAfee MVision ePO enables strong authentication and secure access via SAML Single Sign-on. Acceptto's intelligent Multi-Factor Authentication (MFA) technology helps protect your user accounts and data from being compromised. This document will guide you through the configuration of McAfee MVision ePO to work with the Acceptto SSO Identity Provider service.

McAfee MVISION® is an endpoint and cloud security system used to protect your data and stop threats across your cloud infrastructure.

Pre-requisites#

  1. An Acceptto account with a configured Identity Provider and LDAP Agent. (See this page for the instructions)
  2. A user with administrative privileges for the Acceptto service.
  3. An organization identifier provided by Acceptto (organization slug).
  4. A user with administrative privileges for McAfee MVISION.

Configure McAfee MVISION ePO as a SAML Service Provider#

  1. From the McAfee MVISION dashboard, go to the Identity Provider settings page. MVISION ePO Dashboard

  2. Enter your Acceptto IdP information from the SAML metadata file. Go to https://sso.acceptto.com/[organization identifier]/saml/download/metadata to download your metadata file.

  3. From the User List, select the users that you want to exempt from SSO.

  4. Click Save Changes.

MVISION service provider edit

  1. After successfully saving the configuration, you can view the information in the Service Provider (MVISION) section. We will use this information to create McAfee application in the Acceptto cloud.

MVISION service provider info

Acceptto SAML Configuration as Identity Provider (IdP)#

  1. Login to the Acceptto Dashboard with an administrative account and go to Applications.
  2. Create a new application by selecting the Create New Application.

Acceptto admin panel applications

  1. In the New Application form, enter the following values under the General tab.

    • Name - The application name displayed in the admin panel and application portal used for push notifications and audit logs. (e.g. McAfee MVISION)
    • Type - Select "SAML Service Provider" from the options
    • Out of Band Methods - Select the allowed methods for approving MFA requests
    • Message for MFA Requests - Enter the user-facing message for Push, SMS, and email MFA requests (optional)

Acceptto app settings

  1. Under the SAML Service Provider Configuration tab, enter the following values:

    • Issuer or Entity ID– Enter the Audience value of McAfee Service Provider in the previous section.
    • Sign in URL - Enter the Assertion Consumer Service URL value of McAfee Service Provider in the previous section.
    • NameID Format - Select "Email address" from the dropdown menu.
    • Name Identifier - Select "Email" from the dropdown menu.
    • Assertion Consumer Service (ACS) URL - Enter the Assertion Consumer Service URL value of McAfee Service Provider in the previous section.

Acceptto app saml settings

  1. Click Add New Attribute Assertion button and create the three attributes as below table. These are mandatory if you want to enable the Just-in-time provisioning feature on OneLogin.

    Friendly NameNameValue
    EmailEmailemail
    Last NameLast Namesn
    First NameFirst Namegiven_name

Acceptto app attribute settings

  1. Click Save to create the Application.

NOTE: You must add users to your account and assign roles to allow them to access MVISION ePO using SSO.

Test your setup#

  1. Go to your MVision instance by visiting the Sign in URL configured above.
  2. You will be redirected to the Acceptto SSO page.

Acceptto SAML login form

  1. After successful authentication, you’ll see the Acceptto MFA options. Select your desired method. Next, pass the verification stage on your It'sMe mobile app.

Acceptto MFA

  1. Finally, you will be redirected to your MVISION portal.

MVISION portal

Support#

If you require assistance, please email us at support@acceptto.com.

Sales#

Want to learn more about our MFA solutions? Contact our Professional Services for a demo today.

Disclaimer#

All product names, trademarks, and registered trademarks are the property of their respective owners.