|
Embedded Browser Framework Upgrade
|
Starting with GlobalProtect 6.1.5, the embedded browser framework
for SAML authentication has been upgraded to Microsoft Edge
WebView2 (Windows) and WebKit (macOS). This provides a
consistent experience between the embedded browser and the
GlobalProtect client. WebView2 and WebKit are also compatible
with FIDO2-based authentication methods. For more information,
see the Microsoft Edge WebView2
documentation. By default, tenants using SAML authentication are configured to
utilize the embedded WebView2 (Windows) or WebKit (macOS)
instead of relying on the system's default browser. With this
enhancement, there's no need for end users to configure a SAML
landing page, eliminating the necessity to manually close the
browser. This streamlines the authentication process.
In a Microsoft entra-joined environment with SSO
enabled, users are not required to enter their credentials in
order to authenticate to Prisma Access using GlobalProtect. This
seamless experience is true whether the user is logging in to
their environment for the first time or whether they have logged
in before. If there is an error during the authentication, it is
displayed in the embedded browser. This authentication process
works across all device states.
In a non entra-joined environment with SSO enabled,
users must enter their credentials during the initial login. On
subsequent logins, the credentials are auto-filled as long as
the SAML identity provider (IdP) session is active and has not
timed out.
| 
