topic Re: GlobalProtect Support for FIDO2 authentication by OS in GlobalProtect Discussions

GlobalProtect Support for FIDO2 authentication by OS

Y.Tsushima — Fri, 10 Jan 2025 09:56:28 GMT

Hello everyone,

I have a question about OS support for FIDO2 authentication using GlobalProtect.

Could you please tell me the following about each OS (Win10/Win11/macOS/iPhone/iPad/Android)?

1. Which GP versions support FIDO2 authentication?

2. Is FIDO2 authentication supported by the Embedded Browser or other browsers?

I would like an answer in the following format.

■Example answers
～～～～～～

・Win10/11:

　・In GP versions with "Embedded Browser Framework Upgrade" (※), FIDO2 authentication is supported by the Embedded Browser and other browsers.

　・In GP versions below the above, FIDO2 authentication is supported only by other browsers.

・macOS:

　・In all GP versions, FIDO2 authentication is supported only by other browsers.(Because the Embedded Browser does not support macOS)

・iPhone:・・・
～～～～～～

(※) The following versions (reference is given below)
GP6.0.9 or later, 6.1.5 or later, 6.2.3 or later, 6.3 series

Features Introduced 6.0

https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-release-notes/features-introduced-in-gp-app

Features Introduced 6.1

https://docs.paloaltonetworks.com/globalprotect/6-1/globalprotect-app-release-notes/features-introduced-in-gp-app

Features Introduced 6.2

https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-release-notes/features-introduced-in-gp-app

Features Introduced 6.3

https://docs.paloaltonetworks.com/globalprotect/6-3/globalprotect-app-release-notes/features-introduced-in-gp-app-63

Re: GlobalProtect Support for FIDO2 authentication by OS

reaper — Wed, 15 Jan 2025 09:16:31 GMT

FIDO2 support was introduced in GP 6.3

in older versions (6.2 and earlier), you can configure to use the system native browser instead of the embedded browser for FIDO2. Most regular browsers (chrome, edge, FF,..) will support FIDO2

Re: GlobalProtect Support for FIDO2 authentication by OS

Y.Tsushima — Wed, 15 Jan 2025 09:33:44 GMT

Hello @reaper

Thank you for your reply.

Am I correct in understanding that the following is supported for each OS (Win10/Win11/macOS/iPhone/iPad/Android)?

- When using a browser other than the Embedded Browser, FIDO2 authentication is possible with all GP versions (GP version is irrelevant)

- When using the Embedded Browser, FIDO2 authentication is possible with certain GP versions (※1) (※2)

(※1) GP versions that state "Embedded Browser Framework Upgrade" in the documentation

(※2) macOS is not supported.