Add PreLogon to Existing Portal

mwagner00 — Wed, 04 Oct 2023 13:34:34 GMT

Hi Everyone,

Our current setup is a GlobalProtect portal that utilizes SSO via the free Okta service. This serves our customers as well as our internal staff.

I'd like to switch our internal staff laptops to the prelogon method, so they automatically connect with their AD machine cert, and after they login to their laptop, it passes on their username/password to GlobalProtect. All while not interrupting the normal SSO/Okta flow for our other users.

The only hitch is, the user workstation logins are on a different domain than the one that's connected to Okta. So, would I make a new Client Authentication setting? And where would I place it in the priority list?

I'm assuming then I could make a new agent config, using the certificate device check for the AD domain CA, and assign custom DNS servers, etc.

Any advice/help is greatly appreciated!

topic Add PreLogon to Existing Portal in GlobalProtect Discussions

Add PreLogon to Existing Portal