topic Re: SAML authentication with cookies won´t work in General Topics

SAML authentication with cookies won´t work

Carracido — Thu, 26 Mar 2026 09:15:28 GMT

Dear community,

In our globalprotect setup, we have client certificate authentication in the portal (transparent for user) and SAML authentication in the gateway
We have enabled cookies in the gateway, so after first SAML authentication, the firewall won´t intitiate authentication again wile cookie lifetime is available.
We have disabled single sign on in the application settings as well as “Save User Credentials” is set to yes.

However this configuration seems not to work, the firewall asks for authentication after each Windows session resumes.

Do you have any idea how to make SAML authentication works with cookies so it´s transperent for users after 1st successful authentication.

Thanks in advance!

Re: SAML authentication with cookies won´t work

Brandon_Wertz — Thu, 26 Mar 2026 14:11:01 GMT

What hardware device type is the user on? We have Windows, Mac, and iPad users in our environment. SAML auth for iPads isn't supported by Apple, but we're doing SAML with a cookie override for our Windows and Mac users and we're not having any issues.

We don't "save credential" and our users never put a ID/PW in to the GP app. It's SSO essentially where the GP client transparently collects creds from the OS and SAML auths the user to Entra through CIE. With cookie auth in a given time period for secondary auth.

Re: SAML authentication with cookies won´t work

Carracido — Thu, 26 Mar 2026 14:11:00 GMT

We have only windows machines.

Re: SAML authentication with cookies won´t work

TomYoung — Thu, 30 Apr 2026 17:29:21 GMT

https://live.paloaltonetworks.com/t5/general-topics/gp-with-saml-authentication-always-redirects-to-idp/td-p/1253343