Shibb for Global Protect VPN?

Cantor, Scott cantor.2 at osu.edu
Thu Jan 21 19:51:37 UTC 2021


On 1/21/21, 2:42 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:

>    UAlaska has deployed VPN access using Global Protect. If I understand correctly, VPNs are (or can be) initiated in a web
> portal. If so, seems one could protect that web page with Shibb and thus have a valid SSO session immediately upon
> establishment of VPN connection (at least if IP address consistency is not enforced). 

As far as I know, virtually never. Those are usually based on embedded browsers that aren't going to share cookie state with any browser somebody is using.
 
-- Scott




More information about the users mailing list