topic Re: MAC and captive portal in General Topics

MAC and captive portal

BigPalo — Thu, 25 Jun 2026 13:19:03 GMT

Hi,

Im having an issue with Macbooks. We have a captive portal that uses SAML authentication. If we open Chrome, the captive portal appears and the authentication completes successfully, but no other applications work besides Chrome. Additionally, if we use any other browser, such as Safari, the captive portal does not appear at all.

Any idea for tshooting or root cause?

Re: MAC and captive portal

BPry — Mon, 29 Jun 2026 19:14:53 GMT

@BigPalo,

Since the captive portal uses an authentication cookie, using multiple different browsers isn't ever going to share that authentication session. I'm not sure why you wouldn't be getting the redirect under Safari; are you using redirect or transparent on the captive portal? The Kerberos SSO or PSSO capabilities on macOS can really help you with this process if these macOS endpoints aren't joined to your domain.

Re: MAC and captive portal

BigPalo — Thu, 02 Jul 2026 11:07:00 GMT

Hi,

Im using redirect captive portal.

Re: MAC and captive portal

Brandon_Wertz — Thu, 02 Jul 2026 16:36:27 GMT

@BigPalo -- Long time ago, when I had issues with CP redirect for windows devices it was because the CP redirect IP (URL) needed to be added to the Windows OS' trusted sites, maybe there's a similar MacOS setting where you need to 'allow list' your Palo CP IP? Also there were "supported browsers" for the redirect. I found this KB that talked about something up with FF maybe something similar exists with Safari?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POvnCAG&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail