Global Protect Single/One login Portal/Gateway

Metgatz — Wed, 08 Dec 2021 21:58:15 GMT

Good afternoon, I have a question:

I have Global Protect configured and operating, operating correctly Portal and Gateway.

When one uses the Global Protect App, it always asks 2 times for login, I understand that one is in the Global Protect Portal and then in the Global Protect Gateways.

Is it possible that it only authenticates me once and does not ask for the user login twice, is this possible?

I remain attentive, thank you very much, best regards.

Re: Global Protect Single/One login Portal/Gateway

TomYoung — Thu, 09 Dec 2021 05:16:47 GMT

Hello @Metgatz ,

I have setup GP for many customers and never had to login twice.

Do you have different authentication profiles for the portal and gateway? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQXCA0
Are you using MFA? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cmm3CAC The simple solution to MFA is to configure it for the portal or gateway only.
Another thing you can look at is cookie authentication. https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/authentication/about-globalprotect-user-authentication/how-does-the-app-know-what-credentials-to-supply/cookie-authentication-on-the-portal-or-gateway.html

Thanks,

Tom

topic Global Protect Single/One login Portal/Gateway in General Topics

Global Protect Single/One login Portal/Gateway

Re: Global Protect Single/One login Portal/Gateway