Prompt to change password as it will expire soon doesn't let you change the password

vulpine — Wed, 07 Apr 2021 18:44:41 GMT

I've had a number of users reach out to me to reset their password for the GlobalProtect because they become locked out. They have all said they get a message that their password will be expiring in so many days, but are never prompted to reset the password. Each user has said there is nowhere to click to change the password so it goes past the reset period.

Re: Prompt to change password as it will expire soon doesn't let you change the password

nikoolayy1 — Thu, 08 Apr 2021 18:19:49 GMT

What is used by Globaprotect for authenticating the users in the authentication profile ? Radius, Active directory etc.?

If you are using AD with LDAP Palo Alto, when the AD informs the Palo Alto with an atribute that the password will expire palo alto uses the Globalprotect APP to inform the client that is all. In most cases Palo alto just informs the client and the clients needs to use other methods to change their AD password. Please read the article blow why the users may get the password message before the actuial expiration date:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POneCAG&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

If you are not using the palo Alto globalprotect as a windows single sign-on (SSO), in other words the globalprotect to use the windows credentials for starting the VPN, you can't use Global Protect to change the password:

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-windows-endpoints/sso-wrapping-for-third-party-credential-providers-on-windows-endpoints.html

https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-new-features/new-features-released-in-gp-agent-4_1/active-directory-password-change-using-the-globalprotect-credential-provider.html

topic Re: Prompt to change password as it will expire soon doesn't let you change the password in General Topics

Prompt to change password as it will expire soon doesn't let you change the password

Re: Prompt to change password as it will expire soon doesn't let you change the password