GlobalProtect Windows Credential Provider is not accepting UPN (email address) for logins to devices
1794
Created On 11/07/22 04:26 AM - Last Modified 05/03/24 02:38 AM
Symptom
- Users are not able to make windows login with UPN name when GP credential provider is selected and device is offline"
Environment
- GlobalProtect with SSO enabled for Windows
- LDAP profile is used for GlobalProtect portal authentication
- UPN format username is used to login window when device is offline
Cause
This behavior is due to Microsoft framework does not allow access to local cache.
Resolution
- The resolution is not available due to Microsoft's restriction. Engineering team is evaluating further options.
- As a workaround, user can login successfully when offline using username as UPN format by selecting Windows default credential provider.