topic Re: SAML authentication - How to avoud the "Open GlobalProtect ..." popup ? in GlobalProtect Discussions

SAML authentication - How to avoud the "Open GlobalProtect ..." popup ?

techreg — Thu, 29 Sep 2022 15:21:56 GMT

Hi all,

I recently integrated Azure MFA via SAML with GlobalProtect and it works flawless. The only little issue is a popup that always appears whenever the authentication process is about to be completed. I guess this is the browser communicating with the global protect app , necessary to complete the tunnel creation.

Any idea about how to stop this from happening? I am pretty sure that this is done via an URLAllowList registry entry but I dont know which extension I should approve. So I decided to click on the chek to 'Allow this entry ...' and look for the entry and simply create that entry via script. But unfortunately I cannot find the registry entry. I tried in several location for different browsers without success.An example for Chrome would be

https://admx.help/?Category=Chrome&Policy=Google.Policies.Chrome::URLAllowlist

Thanks

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Re: SAML authentication - How to avoud the "Open GlobalProtect ..." popup ?

LCMember319 — Wed, 08 Nov 2023 19:16:16 GMT

Did you ever figure this out?

Re: SAML authentication - How to avoud the "Open GlobalProtect ..." popup ?

JoseCortijo — Fri, 10 Nov 2023 09:19:31 GMT

we resolved it with a registry entry, only for edge at the moment. if you manage to implement the same for Firefox and Chrome, please let me know to take advantage of it 😉

$RegistryPath = 'HKLM:\SOFTWARE\Policies\Microsoft\Edge'
$Name = 'AutoLaunchProtocolsFromOrigins'
$type = 'String'
$Value = '[{\"allowed_origins\": [\"https://vpn2.xxx.yyy.zzz/\"],\"protocol\": \"globalprotectcallback\"}]'
New-ItemProperty -Path $RegistryPath -Name $Name -Value $Value -PropertyType $type -Force

Re: SAML authentication - How to avoud the "Open GlobalProtect ..." popup ?

dan.faulks — Fri, 17 May 2024 18:46:29 GMT

$RegistryPath = 'HKLM:\SOFTWARE\Policies\Google\Chrome'
$Name = 'AutoLaunchProtocolsFromOrigins'
$Type = 'String'
$Value = '[{\"allowed_origins\": [\"https://vpn.xxxx.yyy.zzz/\"],\"protocol\": \"globalprotectcallback\"}]'

# Check if the registry path exists, and create it if it doesn't
if (-not (Test-Path -Path $RegistryPath)) {
New-Item -Path $RegistryPath -Force | Out-Null
}

# Create or update the registry property
New-ItemProperty -Path $RegistryPath -Name $Name -Value $Value -PropertyType $Type -Force