topic Global Protect Authentication SSO in GlobalProtect Discussions

Global Protect Authentication SSO

Debadutta — Mon, 12 Aug 2019 09:31:16 GMT

Hello Guys, While Global Protect is configured in SSO mode and authentication method is through Active Directory.

So while a AD user changes his user login password it doesnt gets auto update for Global Protect, by this i mean user has to manually authenticate with new passowrd. Is there any way this can be automated.???

Re: Global Protect Authentication SSO

Chacko42 — Thu, 29 Aug 2019 10:56:23 GMT

@Debadutta Please give us a more detailed view on your scenario.
What are you testing, internal external gw, from outside/inside company, on-demand mode or always on, which auth-sequence or profiles configured, ldap authentication or kerberos....

Re: Global Protect Authentication SSO

mringel — Fri, 22 Oct 2021 15:34:34 GMT

As I have the sae issue, here my details:

Environment PA-3250 with 10.1.2, GP 5.2.6 with "allways-on with pre-logon". AD integration is just LDAP, no Kerberos. User-ID is configured.

SSO works until user changes her AD password. GP clients requests the password after reboot (but not when shutdown/start, weird!!).

SSO works again until next password change.

By the way, the password is asked twice. GP log shows invalid user/password for portal and gateway.