Force user credentials at every login Azure AD SAML SSO

I have had GlobalProtect working for years with RADIUS based authentication and MFA.  We are now moving to SAML based SSO with Azure AD.  I have everything working, but, our environment requires that we provide login credentials every time we login t

GP Connection Failed - gateway could not verify the server certiticate of the gateway.

Hi All,

I have GP setup and working like a dream..... most of the times.

however i have a strange issue.. and seems to only affect Azure cloud PCs at the moment, normal users with laptops and desktops can connect no problem.

my certs are all valid an

Global Protect Pre-Logon followed by SAML SSO

Hi Guys,

I have implemented global protect with pre-logon (device certificate) followed by user logon using SAML (Azure AD as SAML IDP)

When global protect client initiate the user authentication below windows security pop up asking to confirm the cer

GP Portal logs showing local password guessing attempts even though I'm using Azure IdP. Should I be concerned?

I have our portal set up to use Azure for logon, and it's been working great. Lately I'm seeing many of these attempts in the system logs:

1. saml-client-redirect, "Client '95.164.0.25' redirected to 'https://login.microsoftonline.com/xxxxxxxxx/sam

Global protect intermittency

A customer tells me that he has vpn connection intermittency in several of his sites, how can I trace the problem or what can it be due to?

IdP initiated GlobalProtect VPN login

I'm in the process of configuring Duo SSO for GlobalProtect authentication. It's all working great when logging in through the GP application. However, both the Duo and Entra how-to guides mention that you can initiate the login through their portal

Global Protect App for Surface Pro 9 - Chip SQ3

Pleas help me about setup GP app for Surface Pro 9 SQ3 - ARM64. GP app notify The Service is not running!

Associate user credentials with a given portal

I'm a consultant working for multiple companies that use Global Protect.

At the moment during the day I have to disconnect and connect multiple times a day to these companies and each time I do this I have to re-enter the user/password then click con

How to best use HIP checks to force current MacOS releases

Hello,

What's the best way to create a HIP check to enforce current versions of MacOS? Prisma Access / Strata UI has some built in version values but it only goes up to MacOS 14.1. 

We're looking to create a rule to enforce current 13.x and 14.x

Remove Remote User from Global Protect using XML API

I am trying to remove remote users from Global Protect using XML API.  I have attempted to remove a user from both the Gateway and the Portal but I have not been successful.

This is the command I am using to remove the user from the Gateway:

(Secti

How to avoid GlobalProtect autostart on Mac

Hello,

I just had to start using the GlobalProtect VPN client for connecting to the VPN of a customer.

I'm using macOS Sonoma 14.4.1, and I installed GlobalProtect 6.2.0-89.

Is there a way to avoid having it running constantly in the background, and

I cannot select user account to login with GlobalProtect App for Windows

I'm using #Global Protect App for Windows

I was given a user account in the domain of a customer to connect to their VPN using GlobalProtect.

I configured the portal corresponding to the user organization of the customer in Global Protect settings.

W

GlobalProtect with Radius Authentication

Hello,

Is it possible to connect to GlobalProtect using EAP-TTLS with PAP authentication?

I am using OneGate as our RADIUS server.