topic Global Protect Integration with Azure SAML w/ Multiple Gateways in Next-Generation Firewall Discussions

Global Protect Integration with Azure SAML w/ Multiple Gateways

DJ_1924 — Fri, 26 Jul 2024 19:32:47 GMT

I'm trying to setup an integration with 2 firewalls at different locations. The portal and 1 gateway reside on 1 of the firewalls, and i've used this:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE

to get that going successfully. The 2nd firewall, which has a certificate w/ a different FQDN, doesn't allow users to connect. My thinking was I needed to create a 2nd enterprise application using the 2nd FQDN or is that not necessarily?

Re: Global Protect Integration with Azure SAML w/ Multiple Gateways

TeemuH — Fri, 02 Aug 2024 18:39:09 GMT

Yeah sounds like the second enterprise application is exactly what you need since you are going to have a different SAML configuration for the other FQDN

Re: Global Protect Integration with Azure SAML w/ Multiple Gateways

Claw4609 — Fri, 02 Aug 2024 18:59:57 GMT

Hello,

What error are you getting when users are trying to connect? You are able to use the same SAML Azure App for multiple GlobalProtect gateways, you just need to add the additional gateways under the Basic SAML configuration urls settings in the Azure app. And have the SAML metadata imported on the gateway firewall.

Re: Global Protect Integration with Azure SAML w/ Multiple Gateways

zGomez — Tue, 13 Aug 2024 12:56:11 GMT

Like Claw is saying you just need to add your additonal gateways in your Azure Entra Global Protec single sign on settings.

Identifier (Entity ID)