About ryan.derrick

Morning all, the difference for me is that i am using on demand for the method. We used to use always on but couldn't see a benefit in leaving it that way when I want this auth part working. if i disconnect it auths again with mfa.  ... View more

Hi all, had a breakthrough with this last night. In the auth profile>authentication if you tick enable single logout it then properly logs out the azure connection when you disconnect. It then prompts for credentials and MFA again on reconnection without the need for any conditional access setup. ... View more

Don't suppose you got anywhere with forcing the token to generate a new MFA request did you? I'm facing the exact same issue. The portal login forces me to use credentials and MFA every time but global protect client has only ever asked me once and now just reconnects without asking for creds or MFA. Massively defeats the point in me trying to use this method to leverage azure MFA. Only thing I can think is that it needs some sort of conditional access but we don't have licence on Azure for that so hoping some way around it ... View more