aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Processed new reference files

Browse Source
This commit is contained in:
aaron.axvig
2026-06-18 08:30:30 -05:00
parent 5202196f2d
commit 51aa74d461
26 changed files with 925 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/data/issues/GlobalProtect/addressed/6.2.8-h2.md
+4 -5
View File
@@ -30,13 +30,12 @@ Fixed an issue where GlobalProtect prompted for credentials instead of using aut
## GPC-22522
Fixed an issue where, after upgrading from GlobalProtect app version 6.1.2 to 6.2.6, external users on Windows 11 computers with multiple Azure Entra accounts were unable to authenticate to the portal using SAML with Azure Entra as the Identity Provider (IdP). The new WebView2 embedded browser automatically used the user's default Windows credential for Single Sign-On (SSO), preventing them from selecting the correct account for authentication.To resolve this issue a new registry key 'entra-sso' has been introduced. You can add the registry key using two methods and set it to no to disable SSO.For pre-deployment, use msiexec.exe /i globalprotect64.msi ENTRASSO="no"Add key entra-sso and set it to nounder HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings.
Fixed an issue where, after upgrading from GlobalProtect app version 6.1.2 to 6.2.6, external users on Windows 11 computers with multiple Azure Entra accounts were unable to authenticate to the portal using SAML with Azure Entra as the Identity Provider (IdP). The new WebView2 embedded browser automatically used the user's default Windows credential for Single Sign-On (SSO), preventing them from selecting the correct account for authentication.To resolve this issue a new registry key 'entra-sso' has been introduced. You can add the registry key using two methods and set it to no to disable SSO.
For pre-deployment, use msiexec.exe /i globalprotect64.msi ENTRASSO="no"
- For pre-deployment, use **msiexec.exe /i globalprotect64.msi ENTRASSO="no"**
- Add key **entra-sso** and set it to **no**under **HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings**.
Add key entra-sso and set it to nounder HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings.
If the entra-sso key does not exist under the above path, the GlobalProtect app's default behavior is to Allow Entra SSO.
If the **entra-sso** key does not exist under the above path, the GlobalProtect app's default behavior is to **Allow** Entra SSO.
## GPC-22066