Follow the steps below to add an authentication profile in Palo Alto for DualShield Radius
On theDevicetab, navigate toAuthentication Profile.
Click theAddbutton to add a new authentication profile, and enter the following information:
Option
Value
Name
EnterDualShield Radiusor any name you prefer.
Type
SelectRADIUSfrom the drop-down list.
Server Profile
SelectDualShield RADIUSfrom the drop-down list (or whatever name used to create the RADIUS Server Profile in theAdd DualShield RADIUS Serversection.
User Domain
(Optional) Depending how your users log on to GlobalProtect you may need to enter your authentication domain name here. Used in conjunction withUsername Modifier.
Username Modifier
(Optional) If this is blank (or set to %USERINPUT%) then the user's input is unmodified. You can prepend or append the value ofUser Domain(as %USERDOMAIN%) to pre-configure the username input.
Click the Advanced tab.
In the "Allow List" section click the drop-down and select all group or a specific group if you want to restrict which users may authenticate with the DualShield RADIUS profile, e.g. mfa test group