Clientless VPN - pass creds to applications

[TomaszLubas]

Hello,

one of our customers want to use PA as SSO for their applications.

Have you any idea if it is possible ?

We can use Kerberos or LDAP for clients authentication to PA but what about pass it to the application ?

[ansharma]

Hi TomaszLubas,

You can possibly adopt SAML as the SSO method. It's universal on all platforms (unlike Kerberos, ldap). Palo Alto version 8.0 and above has SAML based authentication. You will need a SAML provider though.

Regards,
Anurag