How Does the App Know What Credentials to Supply?
By default the GlobalProtect app uses the same login credentials for the gateway as
for portal login, but allows customization of credentials for different portals and
gateways. Options for stronger and faster authentication are available.
By default, the GlobalProtect app attempts to use the same login credentials for the gateway that
it used for portal login. In the simplest case, where the gateway and the portal use the
same authentication profile or certificate profile, the app connects to the gateway
transparently.
On a per-app configuration basis, you can also customize which
GlobalProtect portal and gateways—internal, external, or manual
only—require different credentials (such as unique OTPs). This enables
the GlobalProtect portal or gateway to prompt for the unique OTP without
first prompting for the credentials specified in the authentication
profile.
There are two options for modifying the default app authentication
behavior so that authentication is both stronger and faster:
