topic Re: GP with Certificate base authentication and LDAP, userid not visible in global protect logs in GlobalProtect Discussions

GP with Certificate base authentication and LDAP, userid not visible in global protect logs

SamirAhemed — Wed, 15 Jul 2026 10:15:49 GMT

We have setup wherein user get certificate base authentication on pre logon(machine authentication), When user logged into machine, it must shift from machine name to userid. this transition is not happening.

We also don;t require GP client login window popup. It must derive userid and password from windows login.

Authentication table we have LDAP auth profile and certificate. We have selected option yes ceritifiate or LDAP is required.

Re: GP with Certificate base authentication and LDAP, userid not visible in global protect logs

JayGolf — Fri, 31 Jul 2026 04:42:12 GMT

Hi @SamirAhemed ,

I would verify that Use Single Sign-On is enabled in the portal agent configuration and then review pangps.log immediately after the user signs in to Windows. I would also check the certificate profile’s Username Field, as the machine certificate may still be identifying the session by the machine name.

The expected flow would be to use the machine certificate for pre-logon, then LDAP/SSO for the user authentication after login.