Prisma SASE global Protect not asking for password

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Prisma SASE global Protect not asking for password

L0 Member

we are using Prisma Access for global protect solutions.
configured to have app configuration on-demand - only when user click to connect 

on authentication using a SAML with Azure, SSO is not ON.

when user click connect it connects without asking credentials. 

login lifetime is set to 2 hours, save credentials is set to none.
requirement is to have user prompt for credentials and MFA. 


Cyber Elite
Cyber Elite

you'll need to take a look at your 'conditional access' in Azure, this is allowing the logon to go through without re-prompting the user

Tom Piens
PANgurus - SASE and Strata specialist; (co)managed services, VAR and consultancy

L0 Member

conditional access is setup in Azure however the Prisma is not sending a force auth flag in the authentication request.
so when checked Palo recommend new feature in CIE which only works if we enable default browser using SAML authentication settings.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!