The GlobalProtect app for Chromebooks now supports SAML
single sign-on.
Software Support
: Starting with GlobalProtect™
App 4.1 and with PAN-OS® 8.0 and later releases
OS Support
:
Chrome OS 45 and later releases
The GlobalProtect app for
Chromebooks (Chrome OS) now supports Security Assertion Markup Language (SAML) single sign-on (SSO). If you configure
SAML as the authentication standard for Chromebooks, end users authenticate
to GlobalProtect by leveraging the same login they use to access
their Chromebook applications. This feature enables end users to
connect to GlobalProtect automatically without having to re-enter
their credentials on the GlobalProtect app.
In this implementation,
Google acts as the SAML service provider while the GlobalProtect
app authenticates users directly to their organization’s SAML identity
provider.
GlobalProtect currently supports
only the
Post
SAML HTTP binding method.
To use
SAML SSO for Chrome applications, end users must install the
SAML
SSO for Chrome Apps
Google extension on their Chromebooks. This
extension allows users to access multiple Chrome applications during
a single login session by sending the user’s SAML SSO cookies to
all applications that are whitelisted by an administrator.
Use
the following steps to configure SAML SSO for Chrome applications: