Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

[GWong4]

Hello Community,

I'm looking into integrating Okta's Multi-Factor Authentication (MFA) with GlobalProtect SSLVPN. May I know is the OKTA MFA is free for Palo Alto firewall global protect SSLVPN.

Can anyone confirm if Okta's MFA is indeed free when used with GlobalProtect? If so, could you point me towards any official documentation, guides, or knowledge base articles that detail the setup process?

[ozheng]

Hello @GWong4 ,

You need to check the pricing with Okta.

Based on the documentation below, there is no need of GP license for MFA.

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-overview/abou...

Olivier

[GWong4]

Hi,

Yes, The GP license is free. How about the OKTA MFA is free or subscription?

Best Regards

[ozheng · Accepted solution]

Hello @GWong4 ,

Okta is not part of Palo Alto Networks.

You can find the pricing on the page below.

https://www.okta.com/sg/pricing/

Olivier

[GWong4]

Hi @ozheng 

May i know is the Palo Alto firewall support google authenticator?

Best Regards

[ozheng · Accepted solution]

Hello @GWong4 ,

As long the authentication method is SAML, any mean to authenticate against the user and the IdP (Okta, Duo....) is between the user and the IdP.

The firewall is a SP, it is only waiting the SAML assertion from the IdP to provide the service.

Olivier