Next-Generation Firewall (NGFW) supports the ability to enable single sign-on (SSO) through the admin UI.
- PingFederate is installed and configured.
- NGFW is installed and configured.
- You have a GlobalProtect portal certificate.
- You have a Certificate Profile.
- You have an identity provider (IdP) certificate signed by a certificate authority (CA), and trusted by the NGFW device (recommended).
You can combine GlobalProtect VPN with PingFederate for SSO as illustrated in the following diagram.
