Palo alto GP with azure SAML

[Kevin-Ng]

Hi, I was reading about the integration of Palo Alto GP with Azure SAML authentication.

My globalprotect is using port 4433 to access instead of the default 443.

Hence, I'm wondering what to configure for the identifier, a reply URL, and a sign-on URL in Azure SSO.

Below is how I should set it up in my Azure? So instead of the default 443, i will put 4433 instead in those URLs?

- Sign-on URL: https://IP-address:4433

- Identifier (Entity ID): https://IP-address:4433/SAML20/SP

- Reply URL (Assertion Consumer Service URL): https://IP-address:4433/SAML20/SP/ACS

GlobalProtect  

[tamilvanan]

Hi @Kevin-Ng 

You can integrate Palo alto with Azure SSO via port number 443 only as the Azure supports default port number and custom port number cannot be configured.