topic Re: Clientless VPN - pass creds to applications in General Topics

Clientless VPN - pass creds to applications

TomaszLubas — Thu, 09 Mar 2017 10:50:47 GMT

Hello,

one of our customers want to use PA as SSO for their applications.

Have you any idea if it is possible ?

We can use Kerberos or LDAP for clients authentication to PA but what about pass it to the application ?

Re: Clientless VPN - pass creds to applications

ansharma — Thu, 16 Mar 2017 00:29:49 GMT

Hi TomaszLubas,

You can possibly adopt SAML as the SSO method. It's universal on all platforms (unlike Kerberos, ldap). Palo Alto version 8.0 and above has SAML based authentication. You will need a SAML provider though.

Regards,
Anurag