topic IdP initiated GlobalProtect VPN login in GlobalProtect Discussions

IdP initiated GlobalProtect VPN login

AycockR_scrra.net — Fri, 29 Mar 2024 21:23:31 GMT

I'm in the process of configuring Duo SSO for GlobalProtect authentication. It's all working great when logging in through the GP application. However, both the Duo and Entra how-to guides mention that you can initiate the login through their portal (IdP or SP initiated login). However, when I try it though the Duo Central portal, it just logs me into the web based clientless VPN portal. Is it possible to launch and connect the GP app from one of these portals? Has anyone set that up?

Re: IdP initiated GlobalProtect VPN login

JayGolf — Wed, 03 Apr 2024 14:52:43 GMT

Hi @AycockR_scrra.net ,

Thats interesting. Could you share the guides you worked through? From what I've seen, the clientless VPN is typically accessed via the web while connecting to the app must be connected via the app itself.

Re: IdP initiated GlobalProtect VPN login

AycockR_scrra.net — Wed, 03 Apr 2024 16:16:39 GMT

Here are the integration guides that suggested it was possible. I got a response back from Duo, and they confirmed that IdP initiated login only works for the web based clientless VPN, unfortunately.

Duo Guide

Entra Guide