Enhancements for Authentication Using Smart Cards-Removal of Multiple PIN Prompts
Enhancements for Authentication Using Smart Cards-Removal of Multiple PIN
Prompts
When using Connect Before Logon (CBL) with smart card authentication and ActivClient
software, users previously encountered significant friction due to repeated PIN prompts.
This issue occurred on devices where ActivClient software was installed alongside the
GlobalProtect app, forcing end users to enter their smart card PIN multiple times and
hindering the seamless pre-login process. This disruption compromised the reliable and
streamlined access intended by the CBL connection method.
To provide a superior user experience, GlobalProtect® now streamlines smart card
authentication for this specific configuration. This enhancement ensures that the
GlobalProtect app effectively manages the complex interaction between the Windows
identity provider and ActivClient software. Consequently, the end user is
prompted to enter their PIN only once. This
single required prompt correctly originates from the ActivClient software, ensuring a
quick, consistent, and uninterrupted connection using the Connect Before Logon
method.