Global Protect + SAML & Client Download Page vs Authentication Successfull
If I had hair left I would be ripping it out.
We have Global Protect + SAML multifactor using the default browser for that SAML. It has worked ok for more than a year.
Then magically, early this month, up to a dozen users a day after completing the mu