Who Me Too'd this topic

Hello everyone!

I am looking into setting up custom portal name in Prisma access GP VPN.

Currently configured is
Paloalto CIE <> MS Azure AD (Entra ID) integration completed
GlobalProtect <> PA CIE SAML authentication integration completed
When accessing ~.gpcloudservice.com with GP Agent, connection established with Azure AD SAML authentication.

I checked that there is a Saml signing cert method in the custom portal name > Portal Certificate setting.

My question is this.

Download SAML certificate from Azure AD and distribute and install it to the client > Is the GPcloudservice authentication method correct through the SAML certificate that the user has?

When using the custom portal name method, I think it would be correct to distribute a SAML certificate to the client since it is a method for encrypting the connection between the user <> GP Cloud service.

Thank you.