Pre Logon then on Demand traffic flow

[PaloAlto18]

Hi Community,

We have GP prelogon then on demand.

For pre logon we are using machine cert for authentication.

For on demand we are using SAML MFA.

I see that prelogon works fine for few users but one they logon to PC and click on connect they get error that PC

is not in intune.

So need to understand that for pre logon it uses only machine cert for authentication?

for on demand does it only uses SAML MFA?

[kiwi]

Hi @PaloAlto18 ,

In order to get better traction for this, I have moved it to the GlobalProtect area.
I would recommend that you visit the  GlobalProtect discussion area to see your discussion and others there and to create any other new discussions there

Cheers,

-Kiwi.