https://live.paloaltonetworks.com/t5/globalprotect-discussions/fido2-support-for-globalprotect-client-does-work-in-embedded/m-p/595932#M5729 <P><SPAN>FIDO2 Security cards during Entra ID SAML authentication does not work. The option to select a hardware "security key" during the Entra ID login flow is not shown. Only the built-in/embeded GlobalProtect web browser exhibits this issue.</SPAN></P> <P>&nbsp;</P> <P><SPAN>We tried the workaround to use the default OS browser for authentication, but the integration is not very smooth so it won’t be a good solution for us. Even with GlobalProtect 6.2.3 FIDO2 is not shown as an option during login.&nbsp; we see the MSWebVIew2 process running during GlobalProtect SAML login.</SPAN></P> <P>&nbsp;</P> <P>&nbsp;</P> <P><SPAN>The issue we are facing is with 6.2.4 and the embedded browser does not show the option FIDO2.</SPAN></P> Mon, 26 Aug 2024 14:37:57 GMT UtkarshKumar 2024-08-26T14:37:57Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/fido2-support-for-globalprotect-client-does-work-in-embedded/m-p/595932#M5729 <P><SPAN>FIDO2 Security cards during Entra ID SAML authentication does not work. The option to select a hardware "security key" during the Entra ID login flow is not shown. Only the built-in/embeded GlobalProtect web browser exhibits this issue.</SPAN></P> <P>&nbsp;</P> <P><SPAN>We tried the workaround to use the default OS browser for authentication, but the integration is not very smooth so it won’t be a good solution for us. Even with GlobalProtect 6.2.3 FIDO2 is not shown as an option during login.&nbsp; we see the MSWebVIew2 process running during GlobalProtect SAML login.</SPAN></P> <P>&nbsp;</P> <P>&nbsp;</P> <P><SPAN>The issue we are facing is with 6.2.4 and the embedded browser does not show the option FIDO2.</SPAN></P> Mon, 26 Aug 2024 14:37:57 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/fido2-support-for-globalprotect-client-does-work-in-embedded/m-p/595932#M5729 UtkarshKumar 2024-08-26T14:37:57Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/fido2-support-for-globalprotect-client-does-work-in-embedded/m-p/595993#M5732 <P>this is not supported with the embedded browser, you need to use the system browser for FIDO2</P> <P>&nbsp;</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1I9CAI&amp;lang=en_US" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1I9CAI&amp;lang=en_US</A></P> Mon, 26 Aug 2024 22:56:53 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/fido2-support-for-globalprotect-client-does-work-in-embedded/m-p/595993#M5732 reaper 2024-08-26T22:56:53Z