Duo Security offers a variety of methods for adding two-factor authentication and flexible security policies to Palo Alto SSO logins, complete with inline self-service enrollment and Duo Prompt.
This video explains how to protect Palo Alto GlobalProtect SSO logins using Duo’s on-premises SSO product, Duo Access Gateway. It describes some of the necessary prerequisites for this configuration and then shows the setup process.
Learn more about this configuration at https://www.duo.com/docs/paloalto-sso. Learn more about Duo Access Gateway at https://www.duo.com/docs/dag.