Has anyone used google authenticator with Global Protect?

[junior_r]

Hi,

Has anyone used google authenticator with Global Protect? Can anyone help on how this is to be configured? I have configured other RADIUS agents in the past.

Thanks

[Remo]

Hi @junior_r

What I can say about that: Works great with Google Authenticator (or any other TOTP App)

And yes, you need a RADIUS server for that. What did you use in the past? And where are the users stored that you want to authenticate (Active directory, SQL Database, ...)

A great one is Censornet MFA. Other alternatives which are free (if you don't want/need support) are LinOTP or FreeRADIUS with a Google Authenticator PAM plugin.

[bigtone]

I am looking to do the same thing for 10-15 users, I don't have ldap for that many users so can I keep the users on the radius server?  I'm thinking of using freeradius with the google authenticator pam plugin...  any config documentation you can point me to?