topic Re: GP and multi factor auth in GlobalProtect Discussions

GP and multi factor auth

Mike_Canfield — Fri, 23 Jan 2026 16:15:18 GMT

with GP auth, is it possible to do RSA authentication along with biometric auth? we would like to replace certificate auth with biometric.

Re: GP and multi factor auth

BPry — Fri, 23 Jan 2026 16:21:09 GMT

@Mike_Canfield,

Not entirely positive on your full goal here, but if you're using RSA as a SAML provider you can modify the Access Policy to a 2.0 policy and enforce both a primary authentication process alongside a secondary process which is probably what you're intending to do for authenticating connections.

Re: GP and multi factor auth

Mike_Canfield — Fri, 23 Jan 2026 16:35:09 GMT

our GP is configured for RSA token authentication and a user certificate. we want to replace using user certs with a biometric authentication.