Cloud Identity Engine Authentication works fine for GlobalProtect(GP) portal but is failing for GP gateway

Authentication profile has been configured with Cloud Authentication service seems to be failing for GP gateway but works fine for GP portal.

• Prisma Access
• Supported PAN-OS
• GlobalProtect (GP) Portal 
• GlobalProtect (GP) Gateway

"Use Default Browser for SAML Authentication" is set to no under GlobalProtect Portal app configuration.

1. Configure "Use Default Browser for SAML Authentication" to "yes" under portal app configuration.
2. This is a required configuration for CIE authentication flow with portal/gateways.

Edit the default browser settings for the GlobalProtect app.