Prisma Access Custom Portal Name

C.Seokgun — Fri, 24 Jan 2025 03:02:55 GMT

Hello everyone!

I am looking into setting up custom portal name in Prisma access GP VPN.

Currently configured is
Paloalto CIE <> MS Azure AD (Entra ID) integration completed
GlobalProtect <> PA CIE SAML authentication integration completed
When accessing ~.gpcloudservice.com with GP Agent, connection established with Azure AD SAML authentication.

I checked that there is a Saml signing cert method in the custom portal name > Portal Certificate setting.

My question is this.

Download SAML certificate from Azure AD and distribute and install it to the client > Is the GPcloudservice authentication method correct through the SAML certificate that the user has?

When using the custom portal name method, I think it would be correct to distribute a SAML certificate to the client since it is a method for encrypting the connection between the user <> GP Cloud service.

Thank you.

Re: Prisma Access Custom Portal Name

Vickynet — Sun, 09 Feb 2025 02:18:07 GMT

@C.Seokgun wrote:

Hello everyone!

I am looking into setting up custom portal name in Prisma access GP VPN.

Currently configured is
Paloalto CIE <> MS Azure AD (Entra ID) integration completed
GlobalProtect <> PA CIE SAML authentication integration completed
When accessing ~.gpcloudservice.com with GP Agent, connection established with Azure AD SAML authentication.

I checked that there is a Saml signing cert method in the custom portal name > Portal Certificate setting.

My question is this.

Download SAML certificate from Azure AD and distribute and install it to the client > Is the GPcloudservice authentication method correct through the SAML certificate that the user has?

When using the custom portal name method, I think it would be correct to distribute a SAML certificate to the client since it is a method for encrypting the connection between the user <> GP Cloud service.

Thank you.

Hello @C.Seokgun , Yes, distributing and installing the SAML certificate from Azure AD to the client is the correct approach for ensuring secure authentication through the GP Cloud service. When using the custom portal name method, distributing the SAML certificate to the client ensures that the connection between the user and the GP Cloud service is encrypted and authenticated properly. Reference Document: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE

topic Prisma Access Custom Portal Name in Prisma Access Discussions

Prisma Access Custom Portal Name

Re: Prisma Access Custom Portal Name