Set Up the MDM Integration With GlobalProtect

Set up the GlobalProtect Infrastructure.
Create Interfaces and Zones for GlobalProtect.
Enable SSL Between GlobalProtect Components.
Set up GlobalProtect User Authentication. Refer to About GlobalProtect User Authentication.
Enable Group Mapping.
Configure a GlobalProtect Gateway.
Activate Licenses for each firewall running a gateway(s) that supports the GlobalProtect app on mobile endpoints.
Set Up Access to the GlobalProtect Portal.
Set up the mobile device management system and decide whether to support only corporate-issued endpoints or both corporate-issued and personal endpoints.
See the instructions for your mobile device management (MDM) system or enterprise mobility management (EMM) system.
Obtain the GlobalProtect app for mobile endpoints.
App store— Download and Install the GlobalProtect Mobile App
Supported mobile device management systems— Deploy the GlobalProtect Mobile App
Other third-party mobile device management system—See the instructions from your vendor on how to deploy apps to managed endpoints.
Configure the MDM integration.
Use one of the following methods to configure the MDM integration:
Firewall integration with an MDM or EMM system:
Configure Windows User-ID Agent to Collect Host Information
GlobalProtect app integration with an MDM or EMM system:
Manage the GlobalProtect App Using a Qualified Third-Party MDM
Manage the GlobalProtect App Using Other Third-Party MDMs
Configure polices that target mobile endpoints using host information.
Configure HIP-Based Policy Enforcement for managed endpoints.