>
    Strata Copilot
    Log in to the Dynamic Privilege Access Enabled Prisma Access Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Configure Dynamic Privilege Access Settings
    5. Use the Prisma Access Agent to Access Your Projects
    6. Log in to the Dynamic Privilege Access Enabled Prisma Access Agent
    Download PDF
    Prisma Access

    Log in to the Dynamic Privilege Access Enabled Prisma Access Agent

    Table of Contents

    Log in to the Dynamic Privilege Access Enabled Prisma Access Agent

    To securely access applications and resources for your projects in your organization's network, you must log in to the Dynamic Privilege Access enabled Prisma Access Agent.
    Where Can I Use This?What Do I Need?
    • Prisma Access Agent
    • macOS 14 and later or Windows 10 version 2024 and later desktop devices
    • Internet access
    To access your organization's network, resources, SaaS applications, or the internet, log in to the Prisma Access Agent using your login credentials.
    After you log in to the Prisma Access Agent, you’re automatically connected to your network using the best location (sometimes called a gateway). The agent automatically selects the best location to provide you with the best performance to provide a better experience, such as viewing websites in your local language. When your device is outside your organization's network, the agent finds the best location to give you the best performance when connecting to the network.
    Before you begin, the Prisma Access Agent must be installed on your device. Typically, your administrator will deploy the Prisma Access Agent to the device that you use to access your organization's network, resources, and applications. The agent is configured according to policy rules defined by your administrator and deployed to your device. However, if your administrator did not deploy the Prisma Access Agent to your device, you will need to manually install the Prisma Access Agent.
    Depending on how Prisma Access is set up in your organization, your administrator should provide you with the following login information:
    • The name of the Prisma Access server hosting the service that manages your Prisma Access Agent. There can be multiple servers depending on the Prisma Access setup.
    • The name of the projects that you work on if your organization uses Dynamic Privilege Access. Dynamic Privilege Access enables you to access your organization's network and resources based on the project you are assigned to, so you won't accidentally access another project's resources. If you are assigned to work on more than one project, you can easily switch projects.
    Depending on the settings for your operating system, the app icons and app interface can appear in dark mode or light mode.
    Log in to the Prisma Access Agent by completing the following steps:
    1. Launch the Prisma Access Agent by clicking the Prisma Access Agent icon
      from the macOS menu bar or Windows taskbar.
    2. Select the Server Name of the Prisma Access server that your administrator provided and click Connect.
      The format of the server name is <xxx>.epm.gpcloudservice.com (without the https:// protocol). The maximum length of the server name is 256 characters.
    3. Enter the project name that your administrator sent you and Continue.
      The maximum length for the project name is 32 characters.
    4. In the login page that appears in your default web browser, sign in to your organization's single sign-on (SSO) app, such as Okta or Azure Active Directory (AD), by entering your login credentials for your organization.
      If your administrator enabled multi-factor authentication (MFA), you’ll need to complete additional verification in the browser when you log in.
    5. When your web browser prompts you, click Open Prisma Access Agent.
      (Optional) If you don’t want the browser to prompt you the next time you log in, select Always allow <site> to open these types of links in the associated app, then click Open Prisma Access Agent (if supported by your default web browser).
    6. Wait while Prisma Access Agent connects to Prisma Access.
    7. After successfully logging in, you’re connected automatically to the best available Prisma Access location. If you signed in using a project, you are connected to the best available location for your project.
      You can now access your organization's resources and SaaS apps, along with secure access to the internet.
      If your administrator enabled Always On mode for Prisma Access Agent, you cannot disconnect from Prisma Access due to your organization's policy. However, you can still change Prisma Access locations.
      If your administrator enabled On Demand mode for Prisma Access Agent, you must click the lock icon to connect to Prisma Access.

    © 2026 Palo Alto Networks, Inc. All rights reserved.