gp-saml-gui(8)

💖 gp-saml-gui — like, the manual page, bestie 💖

okay so this is gp-saml-gui, from the System Manager's Manual (section 8, iykyk). it's a whole vibe. let's get into it 🫶

---

✨ NAME ✨

gp-saml-gui — login to a GlobalProtect VPN that uses SAML authentication

---

🌸 SYNOPSIS 🌸

gp-saml-gui [-h] [--no-verify] [-C COOKIES] [-K] [-p] [-g] [-c CERT]]
            [--key KEY] [-v] [-q] [-x] [-P] [-S] [-E] [-u]
            [--clientos {Windows,Linux,Mac}] [-f EXTRA] server [--]
            [openconnect_extra ...]

---

🦋 DESCRIPTION 🦋

so basically, this is a helper script. its whole job is letting you interactively login to a GlobalProtect VPN that uses SAML authentication, so that you can, like, subsequently connect with OpenConnect. main character energy fr 💅

some GlobalProtect VPNs that use SAML auth are actually amenable to automated login — using tools like openconnect-gp-okta — but bestie, interactive login is still useful for debugging, and honestly it's a necessary alternative for some VPNs. no cap.

---

👑 OPTIONS 👑

🌟 Positional arguments

• server — Hostname or IP address of GlobalProtect server (portal or gateway). the whole point, honestly.
• openconnect_extra — Extra arguments to include in the output OpenConnect command-line. > ⚠️ these should be preceded by -- so that they are not parsed as gp-saml-gui's own options. do not skip the --, i am begging 🙈

💫 Optional arguments

• --h, --help — Show help message and exit
• --no-verify — Ignore invalid server certificate
• -C, --cookies — Use and store cookies in this file
• -K, --no-cookies — Don't use or store cookies at all
• -g, --gateway — SAML auth to gateway
• -i, --ignore-redirects — Use specified gateway hostname as server, ignoring redirects
• -p, --portal — SAML auth to portal (default)
• -v, --verbose — Increase verbosity of explanatory output to stderr
• -q, --quiet — Reduce verbosity to a minimum
• -x, --external — Launch external browser (for debugging)
• -P, --pkexec-openconnect — Use PolicyKit (pkexec) to exec openconnect
• -S, --sudo-openconnect — Use sudo to exec openconnect
• -E, --exec-openconnect — Execute openconnect directly (advanced users 👀)
• -f, --field — Extra form field(s) to pass to include in the login query string (e.g. "-f magic-cookie-value=deadbeef01234567")

🎀 Client certificate

• -c, --cert — PEM file containing client certificate (and optionally private key)
• --key — PEM file containing client private key (if not included in same file as certificate)

🧚 Debugging and advanced options

• -u, --uri — Treat server as the complete URI of the SAML entry point, rather than GlobalProtect server
• --clientos {Mac,Linux,Windows} — clientos value to send

---

🌈 SEE ALSO 🌈

• openconnect(8)
• openconnect-gp-okta (https://github.com/zdave/openconnect-gp-okta)

---

💜 COPYRIGHT 💜

This manual page is Copyright 2020 Luca Falavigna <dktrkranz@debian.org> and Daniel Lenski <dlenski@gmail.com>. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 3 or any later version published by the Free Software Foundation.

---

okay that's literally it bestie, you're so ready. this was gp-saml-gui, dated 2020-12-28 — go forth and authenticate, slay 💅✨🦋