Palo alto GP with azure SAML

Kevin-Ng — Mon, 04 Mar 2024 02:37:56 GMT

Hi, I was reading about the integration of Palo Alto GP with Azure SAML authentication.

My globalprotect is using port 4433 to access instead of the default 443.

Hence, I'm wondering what to configure for the identifier, a reply URL, and a sign-on URL in Azure SSO.

Below is how I should set it up in my Azure? So instead of the default 443, i will put 4433 instead in those URLs?

- Sign-on URL: https://IP-address:4433

- Identifier (Entity ID): https://IP-address:4433/SAML20/SP

- Reply URL (Assertion Consumer Service URL): https://IP-address:4433/SAML20/SP/ACS

Re: Palo alto GP with azure SAML

tamilvanan — Mon, 04 Mar 2024 05:36:05 GMT

Hi @Kevin-Ng

You can integrate Palo alto with Azure SSO via port number 443 only as the Azure supports default port number and custom port number cannot be configured.

topic Palo alto GP with azure SAML in General Topics

Palo alto GP with azure SAML

Re: Palo alto GP with azure SAML