SAML authentication - How to avoud the "Open GlobalProtect ..." popup ?

[techreg]

Hi all,

I recently integrated Azure MFA via SAML with GlobalProtect and it works flawless. The only little issue is a popup that always appears whenever the authentication process is about to be completed. I guess this is the browser communicating with the global protect app , necessary to complete the tunnel creation. 

Any idea about how to stop this from happening? I am pretty sure that this is done via an URLAllowList registry entry but I dont know which extension I should approve. So I decided to click on the chek to 'Allow this entry ...' and look for the entry and simply create that entry via script. But unfortunately I cannot find the registry entry. I tried in several location for different browsers without success.An example for Chrome would be

https://admx.help/?Category=Chrome&Policy=Google.Policies.Chrome::URLAllowlist

Thanks

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

[LCMember319]

Did you ever figure this out?

[JoseCortijo]

we resolved it with a registry entry, only for edge at the moment. if you manage to implement the same for Firefox and Chrome, please let me know to take advantage of it 😉

$RegistryPath = 'HKLM:\SOFTWARE\Policies\Microsoft\Edge'
$Name = 'AutoLaunchProtocolsFromOrigins'
$type = 'String'
$Value = '[{\"allowed_origins\": [\"https://vpn2.xxx.yyy.zzz/\"],\"protocol\": \"globalprotectcallback\"}]'
New-ItemProperty -Path $RegistryPath -Name $Name -Value $Value -PropertyType $type -Force

[dan.faulks]

$RegistryPath = 'HKLM:\SOFTWARE\Policies\Google\Chrome'
$Name = 'AutoLaunchProtocolsFromOrigins'
$Type = 'String'
$Value = '[{\"allowed_origins\": [\"https://vpn.xxxx.yyy.zzz/\"],\"protocol\": \"globalprotectcallback\"}]'

# Check if the registry path exists, and create it if it doesn't
if (-not (Test-Path -Path $RegistryPath)) {
    New-Item -Path $RegistryPath -Force | Out-Null
}

# Create or update the registry property
New-ItemProperty -Path $RegistryPath -Name $Name -Value $Value -PropertyType $Type -Force