Meraki Cloud Portal for Administration does not have Login Banner Configuration Capability?

[Meraki4Life]

Greetings,

My organization has been dinged with an audit finding for the Meraki Cloud Portal for not having a specific Login Banner after admin login.  My research result is the portal does not have the ability to configure login Banners for the admin portal.   Can someone confirm if this is true?

[alemabrahao]

Yes, that statement is correct.

[Meraki4Life]

Thanks!  Always good to have that reassurance.   I see that you can submit for a feature enhancement and shocked it has not been integrated by now. 

[PhilipDAth]

When you use a SAML provider, you can configure a banner to be displayed at the login screen, PRIOR to login.  For example, for Entra:

https://learn.microsoft.com/en-us/entra/fundamentals/how-to-customize-branding

This is done because many countries have either a law or case law that only makes it illegal to access a system if you tell the user BEFORE they login that they are not allowed to login.

It used to be common to display a banner post login, but it is not a good legal position to be in.

[TBHPTL]

Dinged by who under what authority? Please don't say PCI...

[Meraki4Life]

IRS 1075 audit.   We go through it every three years.   Usually, the control ties back to NIST 800-53 with the IRS twist in language. 

[PhilipDAth]

I have looked into this further.  To be compliant with the banner requirements under NIST 800-53, you must use a SAML provider, and that SAML provider must be configured to display a login banner prior to login.

You can configure Entra ID for this.