topic Re: problem with MS Edge with SAML auth for Global Protect in GlobalProtect Discussions

problem with MS Edge with SAML auth for Global Protect

afranklin1 — Tue, 19 Sep 2023 21:57:01 GMT

We have been using SAML authentication with the user default browser for Global Protect for some time now. Within the past month it seems that users with MS Edge as the default browser have been having a lot of trouble authenticating. The SAML completes and the token seems to not be getting passed back to Global Protect. Switching the user's default browser to either Firefox or Chrome and they start connecting without issue. I'm assuming it's an update MS pushed out but I haven't started digging into it much since we found an easy solution. We are using version 6.0.7 of Global Protect and PAN-OS 10.1.10-h1 Is anyone else seeing this?

Re: problem with MS Edge with SAML auth for Global Protect

0xdn — Thu, 21 Sep 2023 21:28:58 GMT

I can confirm this, using Edge as the default browser is inconsistent for SAML authentication. Switching back to Firefox seems to resolve the issue immediately.

edge: 117.0.2045.36

globalprotect: 6.1.2
PA: 10.2.5

Re: problem with MS Edge with SAML auth for Global Protect

${userLoginName} — Tue, 13 Feb 2024 16:05:20 GMT

We are experiencing a similar issue were you able to come up with a solution besides moving to Chrome or Firefox? We are seeing it also with the embedded or Webview2 browser.

PA 10.2.5

GP 6.2.2

Edge: 121.0.2277.110

Re: problem with MS Edge with SAML auth for Global Protect

afranklin1 — Wed, 14 Feb 2024 15:40:51 GMT

Firefox is still my go-to workaround for this. I had a user with Chrome last week start causing the problem for the first time. I'm disturbed to hear you've seen the problem with the embedded browser. I was considering switching to that once I thought both Edge and Chrome were issues. I couldn't replicate the problem with Edge in my test VM after the Chrome problem though so I didn't make the change. So, it still seems to be sporadic from my point of view so I haven't opened a support ticket.

Currently...

PA 10.1.11-h4

GP 6.0.7