08-26-2024 07:37 AM
FIDO2 Security cards during Entra ID SAML authentication does not work. The option to select a hardware "security key" during the Entra ID login flow is not shown. Only the built-in/embeded GlobalProtect web browser exhibits this issue.
We tried the workaround to use the default OS browser for authentication, but the integration is not very smooth so it won’t be a good solution for us. Even with GlobalProtect 6.2.3 FIDO2 is not shown as an option during login. we see the MSWebVIew2 process running during GlobalProtect SAML login.
The issue we are facing is with 6.2.4 and the embedded browser does not show the option FIDO2.
08-26-2024 03:56 PM
this is not supported with the embedded browser, you need to use the system browser for FIDO2
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1I9CAI&lang=en_US
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
