This feature enables you to configure the GlobalProtect app to 
use the default browser to authenticate to
                the GlobalProtect portal through the 
Client Authentication
                setting of the portal configuration. You can now select the 
Use Default
                    Browser option on the 
Client Authentication
                screen for the app to use the default browser for SAML/CAS authentication to
                authenticate to the portal for the first time. The 
Use Default
                    Browser option is displayed on the 
Client
                    Authentication screen only when you choose SAML/CAS as the
                authentication profile.
Starting from PAN-OS 11.1, you do not need to set the pre-deployment keys/plist
                entries to configure the app to choose whether the app should use the default
                browser or embedded browser instead you can configure it through the Client
                Authentication setting of the portal configuration.
End users can benefit from using the 
default system browser for SAML
                    authentication because they can leverage the same login for GlobalProtect
                with their saved user credentials on the default system browser such as Chrome,
                Firefox, or Safari.