IOS and Globalprotect using Multifactor authenticator

[HMahfouz]

We are facing a problem on IOS devices related to globalprotect using Multifactor Authenticator with Azure. We tried forming a certificate chain a root certificate and an intermediate certificate.

We added to the root certificate an extra attribute which is "IP= "IP Address" from Subject Alternative Name (SAN) field". As for the intermediate certificate we added an extra option which is "Host Name= "DNS" from Subject Alternative Name (SAN) field in the Certificate Attribute" and the value of the internal DNS server.

Then we downloaded globalprotect and installed the certificates on the IOS device, however, an error appeared which is "Connection Failed GlobalProtect failed to connect to the login server. Contact your IT help desk to resolve the issue.An SSL error has occurred and a secure connection to the server cannot be made".

We then tried to install the certificates on the IOS device however, without pressing “Always Trust” but still we were getting the same error.

Note that we tried the above certificate formats because before we didn’t use Multifactor authentication and globalprotect was not working on IOS and Android. However, when we did the above certificates, globalprotect started working on both IOS and Android. GlobalProtect  NGFW