topic Re: GlobalProtect with Azure MFA setup in GlobalProtect Discussions

GlobalProtect with Azure MFA setup

RileyDylan — Sat, 09 Jan 2021 07:12:31 GMT

Has anyone had any luck setting up MFA on the Palo Alto with Global Protect with Microsoft Azure MFA (Hybrid) I tried opening a ticket with the support team and they said they had no clue how to setup but could support it if broken and told me a "Sales" Engineer would reach out to me sometime that day. That was 4 business days ago.

I have been reading articles but have not had luck with them. Anyone have an Idiots guide to setting up Microsoft Azure MFA with Global protect?

PA Version: 8.1.15

Global Protect Client: 5.1.1

Re: GlobalProtect with Azure MFA setup

MP18 — Sat, 09 Jan 2021 23:04:10 GMT

@RileyDylan

Please see links below.

They explain how to do this setup.

https://www.consigas.com/best-practices/authenticating-globalprotect-and-prisma-access-remote-access-users-against-office365-azure-ad

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/palo-alto-networks-globalprotect-tutorial

Regards

Re: GlobalProtect with Azure MFA setup

DavidMaas1 — Thu, 14 Jan 2021 19:44:22 GMT

Hi,

We are testing exactly this without Azure AD. We import the exported .XML file from Azure AD setup into Palo as a new SAML object and then attach that to the auth profile. We have been successful with basic user authentication.