topic Re: authentification Global Protect with Office 365 SAML in General Topics

authentification Global Protect with Office 365 SAML

WilliamFoisseau — Wed, 27 Dec 2023 10:00:36 GMT

Hi,

I'm trying to use Office 365 Login to connect to my globalprotect VPN. on the configuration of my portal and gateway, I use the Microsoft User/group to assign a different configuration on "glovalprotect portal configuration, agent, USers/user Group". unable to connect. it works if I declare the users/user Group option has ALL.

thank for your help

Re: authentification Global Protect with Office 365 SAML

WilliamFoisseau — Wed, 27 Dec 2023 10:32:42 GMT

same problem of this topic

https://live.paloaltonetworks.com/t5/globalprotect-discussions/azure-ad-globalprotect-unable-to-filter-the-client-settings/td-p/535214

Re: authentification Global Protect with Office 365 SAML

BPry — Wed, 27 Dec 2023 20:54:27 GMT

@WilliamFoisseau,

Did you follow the suggestions in the post that you linked? It'll be the exact same issue, what you're specifying isn't how the SAML connection is returning the user. If you have UPN (which is how most SAML configurations function) included in your group mapping profile you should be good to go. If you aren't listing userPrincipalName (UPN) as an alternate username in your grop mapping settings under 'User and Group Attributes' you're going to run into issues like you are currently.