Global Protect and Azure SAML

PBassett — Mon, 04 Dec 2023 15:30:09 GMT

Hi All

PA-VM running 11.0.02

Global Protect 6.2.0

After some advise/suggestions

We are rolling out Global Protect for the first time and getting some strange results

Portal and Gateway Configured to use Azure SAML in addition to this I have followed this article to try and make the whole process simple for users

Seamless SAML Authentication with default-browser for GlobalPro... - Knowledge Base - Palo Alto Networks

Both our Azure MFA Sign-in Frequency and Authentication Override cookies are set to 1 hour.

On first login everything seems to work ok and if we attempt to disconnect and reconnect VPN within an hour everything seems to work fine and users can connect without needing to authenticate, however after that hour has passed (I assume the Azure cookie timestamps) then the problems start and users get a mixture of issues - the most common one is Finding Best Gateway just sits there and you might get a second browser open (presumably from the Gateway) advising that authentication is successful and to "click here" to launch global protect but this works intermittently but most times Find Best Gateway just sits there...

Anyone setup Global Protect in this way or have any pointers appreciated

Re: Global Protect and Azure SAML

Wowrack-Support — Tue, 11 Jun 2024 23:11:30 GMT

Hello,

I was wondering if you had the issue resolved.

topic Global Protect and Azure SAML in GlobalProtect Discussions

Global Protect and Azure SAML

Re: Global Protect and Azure SAML