GlobalProtect SSO Ad credentials

[BigPalo]

I need to configure the SSO credentials for GP. When the users introduce the domain credentials the GP connect atomatically. 

I was checking the Globalprotect Credential Provider in this link: https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PNMr

but I'm not completely sure I understand this. If I want users to use SSO, should the GlobalProtect\IsGPCPFirstTime registry key be set to 1? Is this value supposed to remain set to 1 permanently, or should it only be 1 during the initial login? The information in the link is somewhat unclear. Could you please clarify how this setting is intended to work?

[JayGolf]

Hi @BigPalo ,

There is no need to change the value of GlobalProtect\IsGPCPFirstTime. This value of 1 is not meant to be set permanently. Its set to 1 by default upon GP installation. Then, after the user's first successful login, this registry key is automatically set to 0,

In the GP App settings, set Use Single Sign-On (Windows) to Yes. Then, set Save User Credentials to Yes. Ensure the GlobalProtect Credential Provider is registered so it can capture the domain password/credentials during Windows logon to pass them to the GlobalProtect app.