Duo two factor authentication challenge message not showing in GP Portal

[K.Eleyouni]

After migrating to PA-1410 from a PA-3200, the Duo 2-FA challenge message stopped showing up on the GP portal page after the initial AD credentials authentication. The functionality is working fine as the textbox for the 2-FA options shows up and proceeds as usual after the user's input, its just that the Duo login banner text that should show up to the user is missing on the page.

The message text should show up as:

" Duo two-factor login for USER

Enter a passcode or select one of the following options:

1. Duo Push to XXX-XXX-XXXX
2. SMS passcodes to XXX-XXX-XXXX

Passcode or option (1-2): "

This behavior is only occurring in the GP web portal page (in order to download the GP client), other login pages using the same 2-FA sequence and profile (i.e. Admin UI, GP client) display the login message correctly with no issues.

I checked the authd.log for differences in logs between the GP portal attempts and the Admin web UI attempts and both are fairly similar, and I am able to see the challenge RADIUS requests and responses (including the banner message received by the firewall)

Did anyone experience a similar issue while using Duo/other 2-FA solutions before?

[UtkarshKumar]

Running into similar issue. Can any one help or suggest what could be the issue here?

[UtkarshKumar]

Can somebody confirm if this is similar to what we are running into here?

PAN-OS 11.0.4 Addressed Issues: PAN-213011