DualShield integrates with Palo Alto GlobalProtect Gateway via RADIUS to add two-factor authentication to VPN logins. Therefore, you should follow the RADIUS Integration Guide to configure DualShield for Palo Alto integration.
For setting up Extensible Authentication Protocal (EAP), please click on the following link for setting up DualShield RADIUS Server Certificate and enabling EAP option.
As Palo Alto supports RADIUS challenge/response, it is recommended that you implement two-step logon for better user experience.