Duo Security (www.duo.com/) offers a variety of methods for adding two-factor authentication and flexible security policies to Palo Alto SSO logins, complete with inline self-service enrollment and Duo Prompt.

This video explains how to protect Palo Alto GlobalProtect SSO logins using Duo’s on-premises SSO product, Duo Access Gateway. It describes some of the necessary prerequisites for this configuration and then shows the setup process.

Learn more about this configuration at www.duo.com/docs/paloalto-sso. Learn more about Duo Access Gateway at www.duo.com/docs/dag.