DUO MFA popup twice for approval login GloablProtect

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

DUO MFA popup twice for approval login GloablProtect

L2 Linker

We configured PA 850 firewall to use DUO for GloablProtect MFA. It works. However, we have an issue. In GloablProtect Gateway Configuration>Agent>Client Settings, if I add a user, for example blin. it works fine. If I add a AD OU, for example Employees, the login user will get two DUO aoorval popup twice. 

 

boblin_0-1683769185596.png

From the DUO Authentication, I can see two Granted. 

boblin_1-1683769394673.png

 

Why it works if I add a user manually one by one, but it popup for two MFA approvals if I add the group or UO to the Gateways?

 

Bob Lin, Chicagotech-MVP, MCSE & CNE
Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on
http://www.ChicagoTech.net
How to Install and Configure Windows, VMware, Virtualization and Cisco on
http://www.HowToNetworking.com
1 ACCEPTED SOLUTION

Accepted Solutions

Cyber Elite
Cyber Elite

@boblin,

Do you have DUO configured on both the Portal and the Gateway, or just the gateway? If you have it on both, are you using authentication cookies at all to avoid the double prompt? 

View solution in original post

4 REPLIES 4

Cyber Elite
Cyber Elite

@boblin,

Do you have DUO configured on both the Portal and the Gateway, or just the gateway? If you have it on both, are you using authentication cookies at all to avoid the double prompt? 

L2 Linker

I have just one DUO authentication for both. Where to configure authentication cookies?

Bob Lin, Chicagotech-MVP, MCSE & CNE
Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on
http://www.ChicagoTech.net
How to Install and Configure Windows, VMware, Virtualization and Cisco on
http://www.HowToNetworking.com

L2 Linker

I have both Generate cookie for authentication override and Accept cookie for authentication override checked. Is this you talking about?

 

boblin_0-1683837060047.png

 

Bob Lin, Chicagotech-MVP, MCSE & CNE
Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on
http://www.ChicagoTech.net
How to Install and Configure Windows, VMware, Virtualization and Cisco on
http://www.HowToNetworking.com

L2 Linker

This is how I fix the problem step by step with screenshots:

Bob Lin, Chicagotech-MVP, MCSE & CNE
Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on
http://www.ChicagoTech.net
How to Install and Configure Windows, VMware, Virtualization and Cisco on
http://www.HowToNetworking.com
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!