Situation: The client just configures MFA for their AD users to login GloablProtect. However, AD users can’t login. Troubleshooting: In Monitor>System, it shows Failed authentication for user: Reason User is not in allowlist.. Resolution: Quoted from Palo Alto networks article: If the allow list is changed to have “all” rather than specific groups, the user … Continue reading Can’t login GloablProtect with User is not in allowlist