Mutliple Two Factor Authentication Requests during login for GP
28956
Created On 02/08/19 00:34 AM - Last Modified 12/17/20 20:00 PM
Symptom
- Multiple Two Factor Authentication Requests during login for GP Client
- Issue with GlobalProtect and 2FA (Duo) where they are being prompted twice for Duo
Environment
- PA-3050
- PANOS-7.1.4-h2
Cause
- Customer had configured their 2FA Auth Sequence for both the Gateway and Portal.
- Under: Network > GlobalProtect > Portal > Agent > Config > Authentication
- Portal and Gateway are both checked as requiring the 2FA authentication.
Resolution
To resolve make sure that the proper components (Gateway or Portal) are checked for requiring 2FA auth.
1. Click Network > GlobalProtect > Portal > Agent > Config > Authentication
2. There is a section detailing what components require 2FA
3. Uncheck either Gateway or Portal for requiring 2FA
NOTE: If both are checked, then both will initiate 2FA requests.