topic Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client? in General Topics

Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

CGSD — Fri, 18 Jul 2014 15:37:02 GMT

Running GP 2.0.3-5 and the single sign on fails on windows 8 or 8.1 clients. Windows 7 works fine so I'm pretty sure I have the portal and gateway setup properly. I've opened a case with support but they're drawing blanks after three days.

Here's the log snippet from the win 8 client.

(T2024) 07/18/14 09:38:15:394 Debug(3273): ServerThread: ProcessServerPortal -- GetConfigFromPortal

(T2024) 07/18/14 09:38:15:394 Debug(3555): entering.

(T2024) 07/18/14 09:38:15:394 Debug(1141): Proxy auto detect is not needed

(T2024) 07/18/14 09:38:15:394 Debug(3590): SSO enable status is 1, user name is ___empty_username___, domain name is .

Windows 7 log snippet.

(T2260) 07/18/14 09:38:09:227 Debug(3273): ServerThread: ProcessServerPortal -- GetConfigFromPortal

(T2260) 07/18/14 09:38:09:227 Debug(3555): entering.

(T2260) 07/18/14 09:38:09:227 Debug(1141): Proxy auto detect is not needed

(T2260) 07/18/14 09:38:09:227 Debug(3590): SSO enable status is 1, user name is johnadoe, domain name is .

Just wondering if anyone else has a working setup?

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

kadak — Fri, 18 Jul 2014 17:50:36 GMT

Hello CGSD,

Looks like 'user name is ___empty_username___, domain name ' is not populating correctly for 8.1 Windows.

May be this can help:

GlobalProtect single sign on did not work

Thanks and regards,

Kunal Adak

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

CGSD — Mon, 21 Jul 2014 18:55:31 GMT

After checking we have the PanCredProv under the registry that you suggested. In more trouble shooting we have tested Win8, Win8.1, and Windows 8.1 Update all with the same error. We even downgraded to GP Client 1.2.10 and still no luck with SSO. It is weird that is works fine if using Windows 7 but Windows 8 fails every time.

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

mwhite — Tue, 02 Sep 2014 16:12:27 GMT

Did you get any resolution to this in the end?

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

jbarea — Thu, 12 Feb 2015 23:18:57 GMT

Hi all,

Same problem here. Did you figured out how make it work?

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

harshanatarajan — Fri, 13 Feb 2015 01:53:19 GMT

WIN 8.1 no longer forces SSO info.

In Windows 8.x, Microsoft changes the login model to become user centric. That means any user has the right to select which authentication method (tile under "sign in options" during log in) to use to authenticate to Windows.

When logging in, you can actually select the global protect tile under the sign in options as shown below and then the SSO works in Windows 8.1.

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

harshanatarajan — Fri, 13 Feb 2015 01:55:58 GMT

One more thing to add, the SSO GP tile will not be active until the user logs in to windows the first time, this is default behavior as the tile can only be bound once logged on.

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

jbarea — Fri, 13 Feb 2015 15:35:53 GMT

Thanks for the information,

The problem here is the user needs to login in order to be able to see the tile. Then the SSO option makes no sense because the user needs to do a first login an then lock the computer in order to see the sso option.

Anyway thanks for you reply. We will wait to see if this is solved in future releases.

Re: Anyone successfull with Global Protect Single Sign on and Windows 8.1 client?

parmas — Fri, 03 Apr 2015 16:10:51 GMT

Correct. Unfortunately this ends up being on the Windows side. Apparently, there is no way to force windows to default to the GP option in the "Sign-in" options tile.