User vpngroup mapping w/Cloud Identity Engine + Google G Suite/Workspace

ricktait — Wed, 05 Jul 2023 15:57:38 GMT

Hello all. I just cannot seem to get custom user vpngroup mapping working with Cloud Identity Engine + Google G Suite. My setup:

PANOS 10.1.0
Cloud Identity Engine directory setup & working to G Suite
My user's vpngroup is set per-user with a G Suite custom text attribute named "vpngroup"
Directory is syncing fine between Cloud and my onprem PA

How can I have that custom attribute map to the vpngroup setting within PANOS?

When I look at Device -> User Identification -> Cloud Identity Engine -> <NAME> and try to select "vpngroup" as the Group Name within Group Attributes, I see only "Name, Common-Name, Mail, Distinguished Name" as options. How can I have custom attribute "vpngroup" show up?

Thank you in advance!

-RMT

topic User vpngroup mapping w/Cloud Identity Engine + Google G Suite/Workspace in GlobalProtect Discussions

User vpngroup mapping w/Cloud Identity Engine + Google G Suite/Workspace