topic SAML and GlobalProtect in GlobalProtect Discussions https://live.paloaltonetworks.com/t5/globalprotect-discussions/saml-and-globalprotect/m-p/542930#M4112 <P>Hello,</P> <P>We have 4 vCPU PaloAlto NGWF Firewall. We are using GlobalProtect for Remote Access VPN Service. Now we would like to enable 2FA via Azure (SAML). I tried to do configuration as it showed in Palo Alto article:&nbsp;</P> <P>&nbsp;<A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE</A></P> <P>I can login into Portal with AD Credentials, but I can't connect to the gateway. Also I would like to provide access to the network based on AD groups. How I can configure it? How palo will do IP-User Mapping in this case?&nbsp;</P> <P>&nbsp;</P> <P>Thanks in advance</P> <P>&nbsp;</P> Mon, 22 May 2023 15:18:50 GMT AdjaraGroup 2023-05-22T15:18:50Z SAML and GlobalProtect https://live.paloaltonetworks.com/t5/globalprotect-discussions/saml-and-globalprotect/m-p/542930#M4112 <P>Hello,</P> <P>We have 4 vCPU PaloAlto NGWF Firewall. We are using GlobalProtect for Remote Access VPN Service. Now we would like to enable 2FA via Azure (SAML). I tried to do configuration as it showed in Palo Alto article:&nbsp;</P> <P>&nbsp;<A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE</A></P> <P>I can login into Portal with AD Credentials, but I can't connect to the gateway. Also I would like to provide access to the network based on AD groups. How I can configure it? How palo will do IP-User Mapping in this case?&nbsp;</P> <P>&nbsp;</P> <P>Thanks in advance</P> <P>&nbsp;</P> Mon, 22 May 2023 15:18:50 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/saml-and-globalprotect/m-p/542930#M4112 AdjaraGroup 2023-05-22T15:18:50Z Re: SAML and GlobalProtect https://live.paloaltonetworks.com/t5/globalprotect-discussions/saml-and-globalprotect/m-p/543021#M4113 <P>Hello,</P> <P>&nbsp;</P> <P>Still need help&nbsp;</P> Tue, 23 May 2023 09:55:49 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/saml-and-globalprotect/m-p/543021#M4113 AdjaraGroup 2023-05-23T09:55:49Z