Hello,

We are planning to migrate our PAM360 authentication from AD to SAML SSO (Entra ID).

Before proceeding, we would like to clarify a few points:

1. Is it possible to enable SAML SSO authentication while keeping the existing AD authentication method available at the same time?

2. If both authentication methods can coexist, can users choose between SAML SSO and Active Directory login during the transition period?

3. Are there any limitations or known issues when running both authentication methods simultaneously?

4. What is ManageEngine recommended approach for migrating from AD authentication to SAML SSO in a production PAM360 environment?

Thank you.