Learning about advanced configuration features
In this section, we will take a look at the less common and more advanced features that can be set in GlobalProtect to provide more flexibility or increase security, or both. First, we will look at integrating authentication with Security Assertion Markup Language (SAML).
Integrating SAML into authentication methods
With more and more services moving to the cloud, it makes sense for organizations to also move (part of) their Active Directory into the cloud. This makes setting up authentication for GlobalProtect a little more challenging as there may no longer be an option, or a need, to use older protocols such as LDAP or RADIUS in favour of newer authentication standards such as SAML.
Configuring Microsoft Azure for SAML SSO
Microsoft Azure provides a user-friendly experience and has a free option with limited features but sufficient capabilities for you to experiment with, so I will start from Azure as a template for other...
