GlobalProtect's saved username/password works when I connect AFTER login, but not BEFORE....

jrauman — Wed, 03 Feb 2021 16:36:19 GMT

We have GlobalProtect configured to use our Windows/Active Directory username/password for connecting/authentication. The user's credentials are saved in GP (and Windows Credential Manager) the first time they enter them so that subsequent connections do not require credentials. This has saved our users a lot of time getting connected when they first sign on.

With GP 5.2.x we have enabled 'connect before login', which works great except Credential Manager is not available to GlobalProtect if we connect BEFORE sign on. Is there a way around that so we can keep using those saved credentials regardless if we connect BEFORE or AFTER sign on? Users don't want to use BEFORE because it requires a 2nd sign on step. Can we enable saved credentials for use in 'connect BEFORE login'?

Re: GlobalProtect's saved username/password works when I connect AFTER login, but not BEFORE....

is_trouser — Mon, 22 Feb 2021 13:28:25 GMT

Hi Jrauman:

The Pre-Logon method should be Cookie authentication. It was the better.

But you can refer to the TechDoc blow to allow users to Pre-Logon with username and password

https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method.html

topic Re: GlobalProtect's saved username/password works when I connect AFTER login, but not BEFORE.... in GlobalProtect Discussions

GlobalProtect's saved username/password works when I connect AFTER login, but not BEFORE....

Re: GlobalProtect's saved username/password works when I connect AFTER login, but not BEFORE....