Global Protect Windows logon PIN/Password

[CraigAddison]

Hi,

I am currently on GP 5.2.10 & I logon to Windows 11 via a PIN.

When I upgrade to 6.1.0 my windows 11 laptop defaults to password & I have to change it to PIN and then logon. When I revert back to 5.2.10 it defaults to PIN logon.

Is there a way to set PIN as a default when I upgrade to GP 6.1.0

Thanks.

[BPry]

@CraigAddison,

Couple options:

1. Set the 'Use Single Sign-on (Windows) option to 'No' instead of the default of Yes. This will remove the credential provider from being displayed, and obviously requires that you admin the portal.

2. Set the HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\IsGPCPFirstTime key to 0 to stop it from being the default.

The way that GlobalProtect works is a bit funky, because credential providers generally default to the last used. The IsGPCPFirstTime key overrides that behavior until the first GP login and then the credential providers will follow normal behavior where the last provider utilized is the default.