11-01-2022 10:08 AM
Has anyone succeeded in using Keycloak as idP with Globalprotect?
We're having issues with the windows clients receiving "You are already logged in" while trying to log in, which also make the gp app hang. The GP app for macOS never experience this.
We've also experienced with openconnect on Ubuntu (since Palo's own ubuntu GP app does not work at all for us) using a wrapper handling the saml auth. This also works well with Keycloak.
11-07-2022 05:44 PM
Just looking into this briefly, you probably want to ask this on a keycloak forum as well if you haven't to gain some additional traction. Since Keycloak is the one servicing this response when encountering an already established session, GlobalProtect doesn't know how to handle the response.
08-30-2023 03:36 AM - edited 09-01-2023 04:13 AM
As silly as this seems, don't use Enter key, use mouse click to submit the forms.
The fix is to use the "TRANSLATEENTERKEY" option (modify registry or at install).
Alternatively, use system browser instead of the embedded one.
I made it work once in Ubuntu with "gp-saml-gui", but it seems to break now for different reasons.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
