Hi @Jatin.Singh ,
What PAN-OS and GP versions are you using ?
I've seen this on GP version 5.0.3 and it was fixed after a client upgrade.
Go to the GP's setting panel and do a "sign-out" to clear all cache.
Are you seeing any more information in the GP client logs on the reason ?
Based on the error it might be the cookie being rejected due to timeout expiration. Is the authentication attempt reaching the gateway ?
I'd recommend checking the GP version and collecting/reviewing the client logs.
This was raised with the TAC and the following fixed the issue
- SSO works fine when we select GP icon as credential provider during the login.
- We also made changes to make GP as default credential provider as below.
HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\SetGPCPDefault to 1
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!