GP: AzureAD SAML Authentication with iOS Device ID

TMori — Mon, 17 Oct 2022 06:37:24 GMT

I'm using AzureAD SAML authentication with GP.

GP Portal and GW are the same setting for Windows, mac and ios.

Azure SAML authentication uses device ID authentication with Intune.

For Windows and Mac, AzureAD can confirm the device ID and SAML authentication is possible.

However, the iOS device does not receive the device ID to AzureAD.

Therefore, device ID authentication fails. (attached image)

What setting can pass the device ID to AzureAD?

Please give a hint to those who have authenticated iPhone with SAML of AzureAD (device ID on Intune).

Environment:

PAN-OS Ver 9.1.12-h3

GlobalProtect IOS App Ver 6.0.2-0

iOS Ver 15.7 - 16.0.3

topic GP: AzureAD SAML Authentication with iOS Device ID in GlobalProtect Discussions