GP external gateway - Connection method Pre logon Always on

[MP18]

We are using SAML in Azure for GP external gateway connection.

When connection method is on demand we get mobile push notification and user gets connected to the GP.

Testing with Connection method Pre logon Always on, i am not getting mobile push notification.

Need to confirm is this by design?

or is there any config i can do so that Connection method Pre logon Always on  gives me mobile push notification?

[kiwi]

Hi @MP18 ,

Not sure if this is by design. 

I'd recommend reaching out to TAC and have them confirm with engineering if it's by design or not.

Cheers !

-Kiwi.

[MP18]

As per TAC this is by design but i asked him to confirm with Engineering also.

[MP18 · Accepted solution]

TAC confirmed with Engineering team this is not possible.

[vsys_remo]

Hi @MP18 

I don't really get it. Why isn't this possible exactly? With SAML you get single sign on, but as you have another loginfactor the push notification should be sent - so why not in your configuration? Don't give up too easily with answers from TAC 😉

If there really isn't a way without a feature request where you have to wait, what about using RADIUS MFA connectior for your always-on clients? Does it maybe work this way with SSO and push notifications?