Skip to content
NetworkTechGuy
Subscribe

Install Palo Alto GlobalProtect to use default browser for SAML

By Nenad Karlovcec1 min read
paloaltoglobalprotectfirewall

Unfortunately, that doesn't work - for some reason, I'm still reading conflicting things about this.

The problem is that client picks up the configuration from the GP portal, but if it can't connect, then it can't pull the config either, right?

The only solution to this that I've found was to instruct installer to install GP application with direct instruction to disable the built-in browser and use the system default browser. It's quite easy to do:

CMD 
msiexec.exe /i GlobalProtect64.msi DEFAULTBROWSER=YES

Of course, you need to position yourself in the directory where you downloaded the installer, run the command, and after that, GP will use the default browser to open SAML sessions with your IdP.

Comments (0)

No comments yet. Be the first to comment.

Leave a comment

Never shown. A confirmation link is sent to it.

Plain text. A comment with more than one link waits for review.

Privacy: your name and comment are shown once published. Your e-mail address is never shown or passed on; it is used for the confirmation link and to recognise your later comments, and is deleted when you have no comments left here. Comments that are never confirmed are deleted after 7 days. Confirming sets a cookie in this browser so that it does not ask again.