User VPN Global Protect with MFA as Code or Authenticator App

[Hina-Jabeen]

Hi All,

We want to enable the login of users to Global Protect via MFA to code on phone or via Auth App.

As of now users are getting 1st Auth as the LDAP Profile

[JayGolf]

Hi @Hina-Jabeen ,

Thanks for reaching out! 

I have a few questions:

Are you deploying GlobalProtect for the first time? 

Do you already have an MFA solution in place (Duo, Okta, Azure MFA, or another provider)?

Are you looking to keep LDAP as the primary authentication and add MFA as a secondary step?

Do you have a preference on using TOTP-based auth (Microsoft Authenticater/RSAGoogle Authenticator), push-based (DUO/OKTA), SMS code/Email? 

[Hina-Jabeen]

Hi Jay,

Thank you for reply. 

Are you deploying GlobalProtect for the first time? 

No, we are already using Global Protect on user laptops and ipads. 

Do you already have an MFA solution in place (Duo, Okta, Azure MFA, or another provider)?

Not really 

Are you looking to keep LDAP as the primary authentication and add MFA as a secondary step?

Yes, I think we will keep LDAP as primary 

Do you have a preference on using TOTP-based auth (Microsoft Authenticater/RSAGoogle Authenticator), push-based (DUO/OKTA), SMS code/Email?

As of now we are thinking to go for TOTP based Auth (Microsoft of Google Authenticator as users already using as part of their Email

Thank you.

Regards

Hina