Enable SSO Wrapping for Third-Party Credentials with the Windows Installer

• Wrap third-party credentials and display the native tile to users at login. Users can click the tile to log in to the endpoint using their native Windows credentials. With that single login, users can authenticate to Windows, GlobalProtect, and the third-party credential provider.

  Use the following syntax from the Windows Installer (Msiexec):

  msiexec.exe /i GlobalProtect.msi WRAPCPGUID=”{guid_value}” FILTERNONGPCP=”yes”

  In the syntax above, the FILTERNONGPCP parameter simplifies authentication for the user by filtering the option to log in to the system using the third-party credentials.
• If you would like users to have the option of logging in using the third-party credentials, use the following syntax from the Windows Installer (Msiexec):

  msiexec.exe /i GlobalProtect.msi WRAPCPGUID=”{guid_value}”
  FILTERNONGPCP=”no”

  In the syntax above, the FILTERNONGPCP parameter is set to “no”, which filters out the third-party credential provider’s logon tile so that only the native tile displays. In this case, both the native Windows tile and the third-party credential provider tile are displayed to users when logging in to the Windows endpoint.