Portal Agent Configuration
Windows Registry/macOS Plist
Allow User to Change Portal Address
can-change-portal yes | no
CANCHANGEPORTAL=”yes | no”
Allow User to Dismiss Welcome Page
enable-hide-welcome-page yes | no
ENABLEHIDEWELCOMEPAGE= ”yes | no”
Allow User to Continue with Invalid Portal Server Certificate
can-continue-if-portal-cert-invalid yes | no
CANCONTINUEIFPORTALCERT INVALID= ”yes | no”
Allow User to Disable GlobalProtect App
disable-allowed yes | no
DISABLEALLOWED="yes | no"
Save User Credentials
Specify a 0 to prevent GlobalProtect from saving credentials, a 1 to save both username and password, or a 2 to save the username only.
save-user-credentials 0 | 1 | 2
Not in portal
Allow user to save passwordsetting is deprecated in the web interface in PAN-OS 7.1 and later releases but is configurable from the Windows registry and macOS plist. Any value specified in the
Save User Credentialsfield overwrites a value specified here.
can-save-password yes | no
CANSAVEPASSWORD=”yes | no”
Windows only/Not in portal
This setting enables the GlobalProtect credential provider to display the
Start GlobalProtect Connectionbutton, which allows users to initiate the GlobalProtect pre-logon connection manually.
ShowPrelogonButton yes | no
Windows 10 only/Not in portal
This setting is used in conjunction with GlobalProtect SSO and enables the GlobalProtect credential provider to be set as the default sign-in option at the next Windows login and for subsequent logins. See Deploy GlobalProtect Credential Provider Settings in the Windows Registry for details.
MakeGPCPDefault yes | no
MAKEGPCPDEFAULT=”yes | no”
Windows only/Not in portalThis setting is used in conjunction with GlobalProtect SSO and sets the number of seconds for users to wait to log in to Windows before establishing a tunnel connection. See Deploy GlobalProtect Credential Provider Settings in the Windows Registryfor details.
Windows only/Not in portalThis setting is used in conjunction with GlobalProtect SSO and sets the number of seconds to delay users from logging in to Windows after establishing a tunnel connection. See Deploy GlobalProtect Credential Provider Settings in the Windows Registryfor details.