topic Re: GlobalProtect single sign on did not work in General Topics

GlobalProtect single sign on did not work

MatthiasPreissing — Tue, 28 Jan 2014 12:55:09 GMT

I have problems to use single sign on for the Global PRotect client with windows 7. I have enabled SSO and disabled the save login credential button but I even get the Authentication window.

Re: GlobalProtect single sign on did not work

sraghunandan — Tue, 28 Jan 2014 19:47:52 GMT

Under PaloAlto Networks folder you will find a folder named PANGPS, can you please check to see an instance of user name is ___empty_username___, domain name is.

Also few important things to consider

For GlobalProtect SSO to work as expected, only the following two credential provider filters must be present:

Palo Alto Networks credential provider filter
Native Microsoft credential provider filter

Follow the steps below to view them:

Open regedit.exe
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters
1. Our Credential Provider Filter
2. Native Microsoft Credential Provider Filter

If there are any third party credential provider filters apart from the ones mentioned above, they would interfere with the SSO engine and cause the domain and username to show up blank in the PANGPS.log

Re: GlobalProtect single sign on did not work

MatthiasPreissing — Thu, 30 Jan 2014 15:00:05 GMT

Thanks for the answer but after checking your solution i get GPClient ver 1.2.6 working in SSO mode on win 32 bit but not in Win 64 bit systems