Global Protect and User_ID/Group Mapping

D.Maas — Tue, 13 May 2025 20:01:34 GMT

I have been struggling with an issue that I have seen many times with the GP user/group mapping when using two types of auth resources.

We have are on-prem VPN portal/gateway using Azure SAML auth. Which is turn uses the upn for login (i.e username@domainname.com). The firewall hosting the portal and gateway is using LDAP servers/userID agent servers.

When trying to setup a unique gp portal agent profile that has different configuration setting and using the domain\username or domain\groupname, and even the upn user@domain.com, but when logging in the GP portal from the client, all authentication works however it does not match the specific new user agent profile that we created, it goes to the default agent profile. I have been working with support for 3 weeks with no resolution. Any help would be appreciated

Re: Global Protect and User_ID/Group Mapping

TomYoung — Wed, 21 May 2025 18:00:58 GMT

Hi @D.Maas ,

Please see this thread https://live.paloaltonetworks.com/t5/general-topics/configure-saml-for-globlaprotect-and-use-groups-to-filter/m-p/1226539#M123990 and let me know if it fixes your issue.

Thanks,

Tom

topic Global Protect and User_ID/Group Mapping in GlobalProtect Discussions

Global Protect and User_ID/Group Mapping

Re: Global Protect and User_ID/Group Mapping