High GPU usage during SAML authentication on macOS machines
13298
Created On 10/16/20 16:55 PM - Last Modified 04/23/24 00:14 AM
Symptom
When using SAML authentication, GlobalProtect app uses discrete GPU and in doing so, it uses a lot of energy on the laptop which results in battery drain.
Environment
- Client OS: macOS
- GlobalProtect app 4.1+
- Macbook laptops using more than 1 GPU (in this case, 2 GPU)
Resolution
- Discrete GPU provides substantial graphics performance but uses more energy. The integrated GPU optimizes battery life by using less energy.
- Discrete GPU usage can be seen by referring to the Activity Monitor > Energy tab. It gets activated after GlobalProtect SAML login and continues to be used when connected and disconnected later. It points towards the "GlobalProtect" PID as shown below:
GP connected:
GP disconnected:
- However, when other authentication types are used like Radius, the issue is not observed. The workaround is to either kill the "GlobalProtect" PID or stop the GlobalProtect service via the Activity Monitor.
- There are two ways to resolve this issue:
- To set up GlobalProtect to not use the discrete GPU according to this Apple developer doc: https://developer.apple.com/library/archive/qa/qa1734/_index.html
- To add below javascript code to the IdP login page on the SAML vendor side:
app = require(‘electron’).app app.disableHardwareAcceleration()
Additional Information
Apple provided more information on graphics processors in this link: https://support.apple.com/en-au/HT202053