https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-users-mapping-for-two-tunnels-using-sso/m-p/533604#M3759 <P>Hi,</P> <P>&nbsp;</P> <P>We have a use case where we want to allow users from the same location using Global protect to be able to access two separate Global Protect Gateways and authenticate using SSO via Azure.</P> <P>&nbsp;</P> <P>The reason is that for the first gateway config we have assigned the split tunnel feature, we would like to have a set of users in the same location be able to use the VPN without the split tunnel. To achieve this we want to have the users log on using SSO and be assigned to the correct gateway config.</P> <P>&nbsp;</P> <P>Can this be done with user groups configured in Azure?</P> <P>&nbsp;</P> <P>Thanks</P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 08 Mar 2023 16:45:12 GMT ArmandoGarcia 2023-03-08T16:45:12Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-users-mapping-for-two-tunnels-using-sso/m-p/533604#M3759 <P>Hi,</P> <P>&nbsp;</P> <P>We have a use case where we want to allow users from the same location using Global protect to be able to access two separate Global Protect Gateways and authenticate using SSO via Azure.</P> <P>&nbsp;</P> <P>The reason is that for the first gateway config we have assigned the split tunnel feature, we would like to have a set of users in the same location be able to use the VPN without the split tunnel. To achieve this we want to have the users log on using SSO and be assigned to the correct gateway config.</P> <P>&nbsp;</P> <P>Can this be done with user groups configured in Azure?</P> <P>&nbsp;</P> <P>Thanks</P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 08 Mar 2023 16:45:12 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-users-mapping-for-two-tunnels-using-sso/m-p/533604#M3759 ArmandoGarcia 2023-03-08T16:45:12Z