{"id":2515,"date":"2022-10-25T19:10:39","date_gmt":"2022-10-25T16:10:39","guid":{"rendered":"https:\/\/artem.services\/?p=2495"},"modified":"2022-10-26T10:47:26","modified_gmt":"2022-10-26T07:47:26","slug":"2515","status":"publish","type":"post","link":"https:\/\/artem.services\/?p=2515&lang=en","title":{"rendered":"Palo Alto VM-Series Firewall: GlobalProtect — OneLogin SAML"},"content":{"rendered":"

\"\"<\/p>\n

 <\/p>\n

GlobalProtect supports various authentication methods, including SAML 2.0 IdP. This example shows setting up authentication through OneLogin.<\/p>\n

OneLogin<\/h3>\n

First, let’s add an application, for this, in the OneLogin admin interface, go to "Applications<\/strong>" and click "Add App<\/strong>"<\/p>\n

\"\"<\/p>\n

In the search bar, enter "globalprotect<\/strong>" and click on it<\/p>\n

\"\"<\/p>\n

In the settings, set the name of the application and click "Save<\/strong>"<\/p>\n

\"\"<\/p>\n

Next, in the application settings, go to the "Configuration<\/strong>" item, and in the "Domain<\/strong>" field specify the domain name for GlobalProtect.<\/p>\n

In the "Login URL<\/strong>" field, enter the following:<\/p>\n

https:\/\/YOUR_GP_DOMAIN<\/strong>\/global-protect\/getsoftwarepage.esp<\/p><\/blockquote>\n

So that from the OneLogin portal we can get to the download page of the GlobalProtect client<\/p>\n

\"\"<\/p>\n

 <\/p>\n

This completes the configuration from the OneLogin side, needs to save the changes, and downloads the SAML Metadata file. To do this, click on "More Actions<\/strong>" in the upper right corner and select "SAML Metadata<\/strong>"<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Firewall<\/h3>\n

Import the SAML Metadata<\/strong> file, for this go to the "Device<\/strong>" -> "Server Profiles<\/strong>" -> "SAML Identity Provider<\/strong>" tab and select "Import<\/strong>" in the lower left corner<\/p>\n

\"\"<\/p>\n

Let’s create an Authentication Profile<\/strong>, to do this, go to the "Device<\/strong>" -> "Authentication Profile<\/strong>" tab and select "Add<\/strong>". Specify a name and in the "IdP Server Profile<\/strong>" field select the profile that was imported in the previous step, leaving all other settings as default.<\/p>\n

\"\"<\/p>\n

Go to the "Advanced<\/strong>" tab and add "all<\/strong>" to the "Allow List<\/strong>".<\/p>\n

\"\"<\/p>\n

Click "OK<\/strong>" and save the changes, for this, click "Commit<\/strong>" in the upper right corner. Now we can use this Authentication Profile<\/strong> to authenticate with GlobalProtect.<\/p>\n","protected":false},"excerpt":{"rendered":"

  GlobalProtect supports various authentication methods, including SAML 2.0 IdP. This example shows setting up authentication through OneLogin. OneLogin First, let’s add an application, for this, in the OneLogin admin interface, go to "Applications" and click "Add App" In the search bar, enter "globalprotect" and click on it In the settings, set the name of … \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0447\u0438\u0442\u0430\u0442\u044c "Palo Alto VM-Series Firewall: GlobalProtect — OneLogin SAML"<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1335],"tags":[1899,1901,1919,1905,1921],"_links":{"self":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/2515"}],"collection":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2515"}],"version-history":[{"count":4,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/2515\/revisions"}],"predecessor-version":[{"id":2520,"href":"https:\/\/artem.services\/index.php?rest_route=\/wp\/v2\/posts\/2515\/revisions\/2520"}],"wp:attachment":[{"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2515"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2515"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/artem.services\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}