SSO fails by first time login

[Elmokadem]

Hi All,

GlobalProtect pre-logon is configured. The computers connect pre-logon just fine. However, if this is the first time a user is logging in, or someone else logged in last and they had to change back to their username, GlobalProtect prompts the user for credentials after windows login, even though everything is configured for SSO. If they cancel the GP login prompt, GP fails. If they reboot the pc without logging in to GP and log in again after a windows restart, everything works.

Using global protect client version GlobalProtect64-5.2.3
FW running on 9.1.5

Any clue ?!

Thanks

[kiwi]

Hi @Elmokadem ,

I'd enable debugging on the GP client for analysis to see what's going on exactly.

Cheers,

-Kiwi.

[is_trouser]

Hi everyone

I found the same issue at my side.

The administrator help users to install GP agent in a new PC. And then user first login this PC with AD account.

GP will prompt to ask user to input user name and password when the user arrived to desktop. SSO doesn't work.

If ignore it and restart PC, GP will work with SSO this time.

I tried many times. It always happens. The GP agent version: 5.2.5. Server software version: 7.1.7

If the user install the GP agent by himself. The problem still exists.

[TANielsenBest]

Have the same issue in my environment btw.  Gave up caring, since 2 reboots works, but it's concerning and makes me think maybe we have something misconfigured.