NAME¶

gp-saml-gui - login to a GlobalProtect VPN that uses SAML authentication

SYNOPSIS¶

DESCRIPTION¶

This is a helper script to allow you to interactively login to a GlobalProtect VPN that uses SAML authentication, so that you can subsequently connect with OpenConnect.

Some GlobalProtect VPNs which use SAML authentication are amenable to automated login, using tools such as openconnect-gp-okta, however interactive login is useful for debugging and is a necessary alternative for some VPNs.

OPTIONS¶

Positional arguments

server Hostname or IP address of GlobalProtect server (portal or gateway)

openconnect_extra Extra arguments to include in output OpenConnect command-line (these should be preceded by -- so that they are not parsed as gp-saml-gui's own options).

Optional arguments

--h, --help Show help message and exit

--no-verify Ignore invalid server certificate

-C, --cookies Use and store cookies in this file

-K, --no-cookies Don't use or store cookies at all

-g, --gateway SAML auth to gateway

-p, --portal SAML auth to portal (default)

-v, --verbose Increase verbosity of explanatory output to stderr

-q, --quiet Reduce verbosity to a minimum

-x, --external Launch external browser (for debugging)

-P, --pkexec-openconnect Use PolicyKit (pkexec) to exec openconnect

-S, --sudo-openconnect Use sudo to exec openconnect

-f, --field Extra form field(s) to pass to include in the login query string (e.g. "-f magic-cookie-value=deadbeef01234567")

Client certificate

-c, --cert PEM file containing client certificate (and optionally private key)

--key PEM file containing client private key (if not included in same file as certificate)

Debugging and advanced options

-u, --uri Treat server as the complete URI of the SAML entry point, rather than GlobalProtect server

--clientos {Mac,Linux,Windows} clientos value to send

SEE ALSO¶

openconnect(8)

openconnect-gp-okta (https://github.com/zdave/openconnect-gp-okta)

COPYRIGHT¶

This manual page is Copyright 2020 Luca Falavigna <dktrkranz@debian.org> and Daniel Lenski <dlenski@gmail.com>. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 3 or any later version published by the Free Software Foundation.