Global Protect and User_ID/Group Mapping

[D.Maas]

Hi

I have been struggling with an issue that I have seen many times with the GP user/group mapping when using two types of auth resources.

We have are on-prem VPN portal/gateway using Azure SAML auth. Which is turn uses the upn for login (i.e username@domainname.com). The firewall hosting the portal and gateway is using LDAP servers/userID agent servers.

When trying to setup a unique gp portal agent profile that has different configuration setting and using the domain\username or domain\groupname, and even the upn user@domain.com, but when logging in the GP portal from the client, all authentication works however it does not match the specific new user agent profile that we created, it goes to the default agent profile. I have been working with support for 3 weeks with no resolution.  Any help would be appreciated

[TomYoung]

Hi @D.Maas ,

Please see this thread https://live.paloaltonetworks.com/t5/general-topics/configure-saml-for-globlaprotect-and-use-groups-... and let me know if it fixes your issue.

Thanks,

Tom