Palo Alto Global Protect embedded browser + Shibboleth

[Jones, Steve]

Our campus uses Shibboleth and Palo Alto's Global Protect VPN.

Starting with Global Protect 5.2.9, they made a change to their embedded browser in the app that broke the login page, *but* only if you use enter on the keyboard. Clicking "login" with the mouse works fine. Hitting enter results in the "you clicked the back button or bookmarked the login page" error.

I have a support case open with Palo Alto and they indicated they made a change to the code for the embedded browser because a different IdP was having the opposite problem where the enter key wasn't working.

Their engineering team passed along that the change was:

"If we see the enter key is pressed, then we call Translatemessage API. The following is the API doc from Microsoft:
https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-translatemessage"

Not being a programmer, I'm hoping this makes sense to someone with specific knowledge of the logon page that might be able to explain why that breaks things that I can pass back to Palo Alto to fix on their side. This seems to be global, as we have a number of other separate CSU campuses with the same problem.

Thanks!

---
Steve Jones
California State University, Sacramento