Azure SAML authentication not Happened via GP Agent

[AhamadullahM]

Hi All,

We have implemented the SAML two-factor authentication for Global Protect users.

We have tested via browser for SAML authentication, and the page successfully redirected to the Microsoft sign-in authentication page. After signing in, the Two-Factor Verification process was initiated, and access to the global protect portal was granted upon successful completion.

However, when attempting SAML authentication via the global protect agent, the Microsoft sign-in page and Two-Factor Verification prompt were not displayed, and the agent connected directly.

Kindly help to resolve the issue.

[aleksandar.astardzhiev]

Hi @AhamadullahM ,

Just to clarify - you don't see GP internal browser pop-up at all, or it just pop-up, but closes immediately without prompting for creds.

Are you using authentication override cookies - https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authenti...

 How long lifetime are you using?

[AhamadullahM]

Thanks for your input,

When I entered the portal address in the gp agent after it did not prompt any Microsoft sign-in page. after a few seconds, it shows the GP connected. When I verified the system logs the auth profile is getting SAML profile only. But why its skipped the sign-in and two-factor verification page?

I have verified the configuration. I have not enabled the authentication cookies.