Add multiple authentication profiles (assigned to different user groups) to Global Protect VPN

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Add multiple authentication profiles (assigned to different user groups) to Global Protect VPN

L0 Member

We are looking to convert our default authentication profile from RADIUS w/DUO MFA to SAML (Azure) w/DUO MFA. The client would like to test the new solution with just the internal IT team while normal users maintain the old authentication method. Is there a way to add a second authentication profile to the Global Protect Gateway & Portal which is only initiated by login accounts within a specific group, while all other users authenticate with the default profile?

1 accepted solution

Accepted Solutions

Community Team Member

Hi @D.Wilson417978 ,

 

Unfortunately with SAML, you cannot have multiple auth profiles. You can create two separate portals - one portal for internal IT team and the other for normal users.

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

View solution in original post

2 REPLIES 2

Community Team Member

Hi @D.Wilson417978 ,

 

Unfortunately with SAML, you cannot have multiple auth profiles. You can create two separate portals - one portal for internal IT team and the other for normal users.

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Cyber Elite
Cyber Elite

@D.Wilson417978,

You can split based off of the OS if you have something that you either don't utilize in your environment or can afford to temporarily break for testing. For example if you don't have someone using Chrome as an example, you could test the change on ChromeOS to validate things are working properly before fully making the switch. Same thing would work for any other OS, as long as you have something not being used you could use it to validate without issue.

  • 1 accepted solution
  • 345 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!