topic Re: User VPN Global Protect with MFA as Code or Authenticator App in GlobalProtect Discussions

User VPN Global Protect with MFA as Code or Authenticator App

Hina-Jabeen — Sun, 15 Dec 2024 23:24:05 GMT

Hi All,

We want to enable the login of users to Global Protect via MFA to code on phone or via Auth App.

As of now users are getting 1st Auth as the LDAP Profile

JayGolf — Tue, 17 Dec 2024 21:15:44 GMT

Thanks for reaching out!

I have a few questions:

Are you deploying GlobalProtect for the first time?

Do you already have an MFA solution in place (Duo, Okta, Azure MFA, or another provider)?

Are you looking to keep LDAP as the primary authentication and add MFA as a secondary step?

Do you have a preference on using TOTP-based auth (Microsoft Authenticater/RSAGoogle Authenticator), push-based (DUO/OKTA), SMS code/Email?

Hina-Jabeen — Tue, 17 Dec 2024 22:35:22 GMT

Hi Jay,

Thank you for reply.

Are you deploying GlobalProtect for the first time?

No, we are already using Global Protect on user laptops and ipads.

Do you already have an MFA solution in place (Duo, Okta, Azure MFA, or another provider)?

Not really

Are you looking to keep LDAP as the primary authentication and add MFA as a secondary step?

Yes, I think we will keep LDAP as primary

Do you have a preference on using TOTP-based auth (Microsoft Authenticater/RSAGoogle Authenticator), push-based (DUO/OKTA), SMS code/Email?

As of now we are thinking to go for TOTP based Auth (Microsoft of Google Authenticator as users already using as part of their Email

Thank you.

Regards

Hina