We are using Duo to protect Palo Alto’s GlobalProtect VPN application and have the application configured in Duo Admin to use both SSO (SAML, Azure AD) and the new Universal Prompt. Out of about 100 clients, five of them have run into issue with the...

Can the account you use to do Duo Administration be set to bypass MFA? My MFA device is dead and I cannot get access to another device at this time. I still need to be able to perform MFA tasks as an admin. I set my admin account to bypass but that...

Using Palo Alto GlobalProtect SSO with Duo (and AzureAD for user authentication). When the user clicks ‘Connect’, GlobalProtect reports back “Oops! We had trouble logging you in” with the error as follows: Cannot create NameID. Source attribute ‘Ema...

When a user attempts to connect GlobalProtect VPN, Duo succesfully authenticates the user but is NOT sending back the username to our Palo Alto firewall. It is sending back the email address which is not the same as the username. Why is Duo even loo...

A few of our users get a Java Script error when running the Universal Prompt despite having the Duo Security API in the trusted sites list. Deleting their IE Personal Settings fixes the issue. Any reason why those personal settings would be disrupt...