topic Re: SSO with macOS devices in General Topics

SSO with macOS devices

JosephRecendez — Wed, 15 Mar 2023 17:48:14 GMT

Can anyone tell me if there is a supported method or a known workflow to have Global Protect automatically sign in sign in to the current user account with locally domain bound macOS devices? Similar to the way we are able to do this with Windows PC's. On our Windows PC's that are joined to our on premise domain we are able to use the SSO feature of Global Protect to sign them in automatically based on the Active Directory credentials. Is there a similar way to do with on premise domain joined macs???

I saw the new release today for Global Protect 6.1 that there are new management features with Jamf which is the MDM we use. I watched the video that was released with it and it still shows the user having to sign in. Any thoughts??

Thanks!

https://docs.paloaltonetworks.com/globalprotect/6-1/globalprotect-app-release-notes/features-introduced-in-globalprotect-app/features-introduced-in-gp-app

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/manage-the-globalprotect-app-using-jamf/deploy-the-globalprotect-mobile-app-using-jamf

Re: SSO with macOS devices

BPry — Wed, 15 Mar 2023 20:29:34 GMT

I've never actually used it since any macOS environment since I've always deployed always-on with certificates, but the SSO functionality was enabled for macOS a bit ago. Not sure how well it actually works, but may be something to try.

https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-new-features/new-features-released-in-gp-app/single-sign-on-sso-for-macos-endpoints

Re: SSO with macOS devices

JosephRecendez — Wed, 15 Mar 2023 20:39:05 GMT

Hello @BPry thanks for the comment. I should have elaborated more. I have this setting configured on the Global Protect Portal, and after the user "manually" signs in the first time subsequent logins are SSO. I am trying to get the first login to be SSO which is how Windows reacts.

Thanks!