https://live.paloaltonetworks.com/t5/globalprotect-discussions/gp-saml-authentication-with-multiple-client-configurations-in/m-p/580105#M5121 <P>Hi Everyone,</P> <P>&nbsp;</P> <P>I'm trying to allow to separate entities to login to an external GP gateway using the same auth profile.</P> <P>&nbsp;</P> <P>In the gateway configuration under agent, I have two configs one for each entity with specific routes for each. When I have one of the configs set to any user on any OS this works, but if I try to define which users get which config, it breaks.</P> <P>&nbsp;</P> <P>Any thoughts?</P> Tue, 12 Mar 2024 19:14:57 GMT Brett-Welch 2024-03-12T19:14:57Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/gp-saml-authentication-with-multiple-client-configurations-in/m-p/580105#M5121 <P>Hi Everyone,</P> <P>&nbsp;</P> <P>I'm trying to allow to separate entities to login to an external GP gateway using the same auth profile.</P> <P>&nbsp;</P> <P>In the gateway configuration under agent, I have two configs one for each entity with specific routes for each. When I have one of the configs set to any user on any OS this works, but if I try to define which users get which config, it breaks.</P> <P>&nbsp;</P> <P>Any thoughts?</P> Tue, 12 Mar 2024 19:14:57 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/gp-saml-authentication-with-multiple-client-configurations-in/m-p/580105#M5121 Brett-Welch 2024-03-12T19:14:57Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/gp-saml-authentication-with-multiple-client-configurations-in/m-p/581402#M5175 <P>On the GP gateway firewall, if you run the command show user user-ids match-user&nbsp;<EM>USER</EM> does it return the associated groups? If not there may be an issue with your group mapping.</P> <P>&nbsp;</P> Fri, 22 Mar 2024 20:45:41 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/gp-saml-authentication-with-multiple-client-configurations-in/m-p/581402#M5175 Claw4609 2024-03-22T20:45:41Z