problem with MS Edge with SAML auth for Global Protect

[afranklin1]

We have been using SAML authentication with the user default browser for Global Protect for some time now. Within the past month it seems that users with MS Edge as the default browser have been having a lot of trouble authenticating. The SAML completes and the token seems to not be getting passed back to Global Protect. Switching the user's default browser to either Firefox or Chrome and they start connecting without issue. I'm assuming it's an update MS pushed out but I haven't started digging into it much since we found an easy solution. We are using version 6.0.7 of Global Protect and PAN-OS 10.1.10-h1 Is anyone else seeing this?

[0xdn]

I can confirm this, using Edge as the default browser is inconsistent for SAML authentication. Switching back to Firefox seems to resolve the issue immediately.

edge: 117.0.2045.36

globalprotect: 6.1.2
PA: 10.2.5

[ShawnSnider]

We are experiencing a similar issue were you able to come up with a solution besides moving to Chrome or Firefox?  We are seeing it also with the embedded or Webview2 browser. 

PA 10.2.5

GP 6.2.2

Edge: 121.0.2277.110

[afranklin1]

Firefox is still my go-to workaround for this. I had a user with Chrome last week start causing the problem for the first time. I'm disturbed to hear you've seen the problem with the embedded browser. I was considering switching to that once I thought both Edge and Chrome were issues. I couldn't replicate the problem with Edge in my test VM after the Chrome problem though so I didn't make the change. So, it still seems to be sporadic from my point of view so I haven't opened a support ticket. 

Currently...

PA 10.1.11-h4

GP 6.0.7