Prisma Access - "Authentication Failed" error on GlobalProtect agent when using CAS SSO

• After initial GlobalProtect agent installation, you will get an "Authentication Failed" error on the browser.
• The issue is resolved after disconnect and reconnect the GlobalProtect agent and issue will not reappear.
   

• Prisma Access
• Cloud Authentication Service (CAS) authentication
• GlobalProtect agent installation, default browser set to 'NO'

• GlobalProtect with CAS requires GlobalProtect agent to be installed with default browser.
• If default browser is set to 'NO' CAS will not be able to complete the authentication.

1. Install GlobalProtect agent with default browser option is set to 'YES'.
2. Refer the example below:

msiexec.exe /i GlobalProtect64.msi PORTAL="example.gpcloudservice.com" DEFAULTBROWSER="YES" 

SAML Authentication with Cloud Authentication Service.