Enable SSO Wrapping for Third-Party Credentials with the Windows Installer

Use the following options in the Windows Installer (Msiexec) to enable SSO to wrap third-party credential providers on Windows 7 and Windows Vista endpoints.
  • Wrap third-party credentials and display the native tile to users at login. Users click the tile and log in to the system with their native Windows credentials and that single login authenticates users to Windows, GlobalProtect, and the third-party credential provider.
    Use the following syntax from the Windows Installer (Msiexec):
    msiexec.exe /i GlobalProtect.msi WRAPCPGUID=”{guid_value}” FILTERNONGPCP=”yes”
    Code copied to clipboard
    Unable to copy due to lack of browser support.
    In the syntax above, the FILTERNONGPCP parameter simplifies authentication for the user by filtering the option to log in to the system using the third-party credentials.
  • If you would like users to have the option to log in with the third-party credentials, use the following syntax from the Msiexec:
    msiexec.exe /i GlobalProtect.msi WRAPCPGUID=”{guid_value}” FILTERNONGPCP=”no”
    Code copied to clipboard
    Unable to copy due to lack of browser support.
    In the syntax above, the FILTERNONGPCP parameter is set to “no”, which filters out the third-party credential provider’s logon tile so that only the native tile displays. In this case, both the native Windows tile and the third-party credential provider tile is displayed to users when logging in to the Windows system.

Related Documentation