topic Prisma SASE global Protect not asking for password in Prisma Access Discussions

Prisma SASE global Protect not asking for password

msaranu — Mon, 22 May 2023 15:22:41 GMT

we are using Prisma Access for global protect solutions.
configured to have app configuration on-demand - only when user click to connect

on authentication using a SAML with Azure, SSO is not ON.

when user click connect it connects without asking credentials.

login lifetime is set to 2 hours, save credentials is set to none.
requirement is to have user prompt for credentials and MFA.

Re: Prisma SASE global Protect not asking for password

reaper — Tue, 23 May 2023 16:19:55 GMT

you'll need to take a look at your 'conditional access' in Azure, this is allowing the logon to go through without re-prompting the user

Re: Prisma SASE global Protect not asking for password

msaranu — Wed, 24 May 2023 19:14:07 GMT

No
conditional access is setup in Azure however the Prisma is not sending a force auth flag in the authentication request.
so when checked Palo recommend new feature in CIE which only works if we enable default browser using SAML authentication settings.