Is there a way to accept both SAMAccountName AND UserPrincipalName for user authentication?

Bottom line I would like my user to be able to authenticate using either "MyUserID" or "MyUserID@MyDomain.com".  Can this be done?

Right now, my users authenticate using their SAMAccountName/userID.  As we move toward x.509 Personal Certificate au

Globalprotect with client certificate authentication on Linux (TPM support?)

I'm currently using client certificates as authentication for windows clients. 
Our security team requires that the key is stored on TPM.

As far as I can tell, RedHat supports storing keys on TPM as well TPM RedHat 

Does anyone know if Globalprotect s

Trying to install certificate on web portal page

We have been using self-signed certificates for years with no issues.  However, one business partner can't access the Web portal on our firewall to download the global protect software due to the self-signed cert.  I have tried to configured the fire

Gateway gw:Could not verify the server certificate of the gateway

Hello,

We had PA550 , now moved to PA 440 and configuration migrated from 550 to 440 , and can able to connect with old version of global protect ; but newer version we can't able to connect .

For the newer version of Global protect we are getting

How we can optimise the Palo alto VPN connection currently it is taking 30 second

How we can optimise the Palo alto VPN connection currently it is taking 30 second

HIP Microsoft Patch detection issues

Hello all,

We have been running GP for a while now. Currently using 6.0.3. We would like to start using HIP to detect Microsoft patches installed.. I am finding major issues in detecting installed patches correctly.. I have the HIP object configured

Global Protect Cookies Portal Gateway

Hello good afternoon, as always thank you very much for your time and collaboration.

I have a question, currently I have configured at the level of Global Protect, cookies in both Portal and Gateway.

The issue is that this was configured to keep

Source-NAT with POOL from GlobalProtect zone to subnet behind the MPLS router

Hi community, 

I'm writting this post to get any ideas or suggestions in a new end-customer requirement. The main goal is that all clients connected via GlobalProtect can access to a new services acquired recently via MPLS (attached the brief topolog

In GlobalProtect Always-On method how to force users to Logoff after a certain time period?

With connection method set to User-Logon(Always On) how can we ensure users who connect to the portal get logged off or disconnected after a certain period(in our case after 12hrs). There is no particular way currently to do this until and unless you

GlobalProtect integrated login

Hello,

We currently have GlobalProtect setup with always-on, with certificate logon and credentials (via RADIUS via AD). Right everything is working as designed. We have a desire to remove the manual login once globalprotect launches in the user sess

Launching Global Protect from Microsoft myapps portal

how to allow particular URL to work with full tunnel when i connect to split tunnel

how to allow particular URL to work with full tunnel when i connect to split tunnel

Does a new Split Tunnel require client restart?

We are implementing a split tunnel to separate 365 traffic. Once we configure the Split Tunnel, will the user be required to restart either the client or the PC? before this becomes effective, or should this be an automatic process... If so... how lo

split tunneling

I am trying to get global protect gateways set up on  two PA-850s.

Cant seem to get split tunneling right.

wondering if i need licensing. the description for licensing states that it is needed for split tunnleing by domain, but not for doing it by IP