Gp 2fa

GideonKonga — Mon, 12 Apr 2021 14:33:00 GMT

Hi Team,

We have 2FA auth method using Radius Server for GP VPN users login.

After LDAP password authentication users receives SMS Token and when user entering the token the GP VPN again prompts for the token.
So eventually user receiving another SMS Token and when entering second token user getting authentication failed message on GP client.

For some users we have observed that the we need to enter the credentials two times when we checked in third party software also we were getting multiple logs.

Same has been observed in the Auth logs, PFA for reference.

Re: Gp 2fa

Mick_Ball — Mon, 12 Apr 2021 15:28:53 GMT

It sounds like you are requiring 2FA for both portal and gateway. are you using the authentication override option in the portal and gateway settings...

some helpful info here...

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/authentication/about-globalprotect-user-authentication/how-does-the-app-know-what-credentials-to-supply/cookie-authentication-on-the-portal-or-gateway.html

topic Re: Gp 2fa in General Topics

Gp 2fa

Re: Gp 2fa