Want to use on-prem AD server to authenticate users on VM Series in Azure

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Want to use on-prem AD server to authenticate users on VM Series in Azure

L0 Member

I have a VM series firewall deployed in Azure with a VPN connection to my on-prem PA firewall.  I have GP working on the VM firewall via local user database but I am unable to get the VM firewall to utilize my on-prem AD server to authenticate users.  I have tried adjusting the service route but this does not work for dynamic-DHCP interfaces.  How do I go about accomplishing this?


Cyber Elite
Cyber Elite


Where is the traffic failing? Check the traffic logs to see. Might need to make additional policies to allow it.



L1 Bithead

I've been working on a similar problem and as we're in a hybrid Azure/O365 state, we've had to implement more infrastructure than simply authenticating AD users! To cut a  long story short we've go this working using SAML authentication from our AzureAD and have a hybrid connector to sync on-prem AD with AAD


If you've got GP on your VM working then it's pretty straight forward to configure SAML for SSO, following this article worked for us;



good luck 

  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!