SSO with macOS devices

[JosephRecendez]

Can anyone tell me if there is a supported method or a known workflow to have Global Protect automatically sign in sign in to the current user account with locally domain bound macOS devices? Similar to the way we are able to do this with Windows PC's. On our Windows PC's that are joined to our on premise domain we are able to use the SSO feature of Global Protect to sign them in automatically based on the Active Directory credentials. Is there a similar way to do with on premise domain joined macs??? 

I saw the new release today for Global Protect 6.1 that there are new management features with Jamf which is the MDM we use. I watched the video that was released with it and it still shows the user having to sign in. Any thoughts??

Thanks! 

https://docs.paloaltonetworks.com/globalprotect/6-1/globalprotect-app-release-notes/features-introdu...

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/...

GlobalProtect 

[BPry]

I've never actually used it since any macOS environment since I've always deployed always-on with certificates, but the SSO functionality was enabled for macOS a bit ago. Not sure how well it actually works, but may be something to try.

https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-new-features/new-features-rele...

[JosephRecendez]

Hello @BPry  thanks for the comment. I should have elaborated more. I have this setting configured on the Global Protect Portal, and after the user "manually" signs in the first time subsequent logins are SSO. I am trying to get the first login to be SSO which is how Windows reacts. 

Thanks!