Panorama Templates - Authentication Profile reference issue

[adamlougee]

I would love to require all configuration changes possible of a local firewall to be completed on Panorama.  However, there is one persistent profile setting that sticks out as an issue and that is the Authentication Profile.

For example, I would expect most users are configuring the authentication profile at a high level within templates.  Let's say we used the highest level possible.  Following down the templates, let's say we are are using the bottom most template in a template stack to configure the Captive Portal.  When the Captive Portal is configured within a template, the Authentication Profile must be configured within the same templated to be used.  This is where the issue lies.  If I created all of my Authentication Profiles at the highest level, how to I reference the Authentication Profiles in lower templates without creating new ones?

The same issue occurs when configuring GlobalProtect Portals and Gateways.

Any ideas how to deal with this without creating new Authentication Profiles at a lower level?