Duo SSO With GlobalProtect Client Connection Not Getting Established

A.Devnalkar — Sat, 07 Sep 2024 21:05:06 GMT

I’m encountering an issue with our GlobalProtect VPN setup, which uses LDAP for user authentication and DUO SSO for multi-factor authentication (MFA). The process works as follows:
1. Users launch the GlobalProtect application.
2. They are prompted to enter their LDAP username and password, which are accepted.
3. After successfully completing the DUO MFA prompt, the VPN connection fails to establish.
While the initial authentication (username and password) and MFA steps appear to function correctly, the VPN connection is not granted afterward. I can see authentication successful log in DUO. We've reviewed the LDAP configuration, DUO integration, and GlobalProtect settings, but the issue persists.
Has anyone encountered a similar issue, or could provide guidance on what might be causing the connection failure after the MFA step?

Re: Duo SSO With GlobalProtect Client Connection Not Getting Established

JayGolf — Tue, 10 Sep 2024 04:01:43 GMT

Hi @A.Devnalkar ,

Can you please share the relevant system logs on your FW?

Re: Duo SSO With GlobalProtect Client Connection Not Getting Established

E.Cortes — Mon, 12 Jan 2026 16:43:30 GMT

Did you ever find a solution to this? I am facing the same exact issue with a new deployment

topic Re: Duo SSO With GlobalProtect Client Connection Not Getting Established in General Topics

Duo SSO With GlobalProtect Client Connection Not Getting Established

Re: Duo SSO With GlobalProtect Client Connection Not Getting Established

Re: Duo SSO With GlobalProtect Client Connection Not Getting Established