topic Re: GlobalProtect SSO Ad credentials in GlobalProtect Discussions

GlobalProtect SSO Ad credentials

BigPalo — Fri, 16 Oct 2026 05:38:41 GMT

I need to configure the SSO credentials for GP. When the users introduce the domain credentials the GP connect atomatically.

I was checking the Globalprotect Credential Provider in this link: https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PNMr

but I'm not completely sure I understand this. If I want users to use SSO, should the GlobalProtect\IsGPCPFirstTime registry key be set to 1? Is this value supposed to remain set to 1 permanently, or should it only be 1 during the initial login? The information in the link is somewhat unclear. Could you please clarify how this setting is intended to work?

Re: GlobalProtect SSO Ad credentials

JayGolf — Tue, 20 Oct 2026 04:32:33 GMT

Hi @BigPalo ,

There is no need to change the value of GlobalProtect\IsGPCPFirstTime. This value of 1 is not meant to be set permanently. Its set to 1 by default upon GP installation. Then, after the user's first successful login, this registry key is automatically set to 0,

In the GP App settings, set Use Single Sign-On (Windows) to Yes. Then, set Save User Credentials to Yes. Ensure the GlobalProtect Credential Provider is registered so it can capture the domain password/credentials during Windows logon to pass them to the GlobalProtect app.