topic Re: GlobalProtect MFA on iOS in Prisma Access Discussions

GlobalProtect MFA on iOS

sk_display — Thu, 05 Oct 2023 13:42:05 GMT

Hi,

Has anyone configured 2FA on iOS? We are looking at the possibility of authenticating iOS users to Prisma Access via GlobalProtect. We understand that we can use client certs on the devices, but is it possible to use 2FA on the iOS devices, and what are the ramifications of using 2FA for the end user, for example will push email stop working if the GP connection times out overnight?

Re: GlobalProtect MFA on iOS

hpatel11 — Fri, 10 Nov 2023 13:48:42 GMT

I have done MFA on iOS devices with SAML. What type of authentication are you trying to use?

Re: GlobalProtect MFA on iOS

sk_display — Mon, 25 Mar 2024 23:28:38 GMT

Sorry, I didn't see this. We're trying to do an always-on VPN with GlobalProtect on iOS. We learned through support that SAML is not supported for always-on VPN on iOS.

We ended up using certificate-based auth.