SAML SSO for the GlobalProtect app for Android on Chromebooks

Enable SAML SSO for the GlobalProtect app for Android on Chromebooks.
Software Support
: Starting with GlobalProtect™ app 5.1 and PAN-OS 9.0.6 and later releases.
The GlobalProtect app for Android now supports SAML single sign-on (SSO) for Chromebooks. End users can authenticate to GlobalProtect by leveraging the same login they use to access their Chromebook device or account. This enables users to connect to GlobalProtect without having to re-enter their credentials in the GlobalProtect app.
  1. Sign in to the Google Admin Console and select
    Security
    .
    google-admin-console-security.png
  2. Select
    Set up single sign-on (SSO)
    .
  3. (
    Optional
    ) If you want to set up SSO with any other provider besides Google, select
    Setup SSO with third party identity provider
    and specify the
    Sign-in page URL
    and
    Sign-out page URL
    and upload a valid
    Verification certificate
    .
    google-set-up-3rd-party-provider.png
  4. Configure the SAML identity provider in GlobalProtect.
    1. In the GlobalProtect console, select
      Device
      Server Profiles
      SAML Identity Provider
      .
    2. Match the values you entered for the IdP in the Google Admin Console.
      sso-saml-idp.png

Recommended For You