Introduction
This guide provides a method for connecting to the USU VPN that is compatible with most Linux distributions. It is recommended to use the official GlobalProtect app instead of this method, however the official app only works on a select number of distributions.
The following topics are covered in this article:
- Installing OpenConnect and gp-saml-gui
- Connecting to the USU VPN using gp-saml-gui
- Verifying VPN connection
- Disconnecting from the VPN
Installation and Setup
This section outlines installing OpenConnect and gp-saml-gui.
1. Install OpenConnect
First, open a terminal or command line window. Depending on your distribution of Linux, enter the following command to install OpenConnect:
Debian / Ubuntu / Mint
sudo apt install openconnectFedora
sudo dnf install openconnectArch / Manjaro
sudo pacman -S openconnectBluefin / Bazzite
brew install openconnect
2. Download dependencies for gp-saml-gui
Some of the following commands are from the official GitHub page for gp-saml-gui
Install the following dependencies for gp-saml-gui:
Debian / Ubuntu / Mint
sudo apt install python3-gi gir1.2-gtk-3.0 'gir1.2-webkit2-4.*' pipx
Fedora
sudo dnf install python3-gobject gtk3-devel webkit2gtk3-devel pipxArch / Manjaro
sudo pacman -S gtk3 gobject-introspection webkit2gtk python-pipxBluefin / Bazzite
brew install python3
3. Install gp-saml-gui
Run the following command to install gp-saml-gui using pipx:
NOTE: if the previous step fails, you might have to install gp-saml-gui using pip3. This is provided as a last-resort option, as installing Python packages system-wide can cause issues with Python or your OS.
Additionally, there is an Apt package for Ubuntu, Debian, and Mint. It is older, so it may not work on your system.
Alternate install for Debian-based systems:
apt install gp-saml-gui
Last-resort method:
sudo pip3 install https://github.com/dlenski/gp-saml-gui/archive/master.zip --break-system-packages
4. Reboot
Reboot your computer, or log out and log back in.
Connecting with gp-saml-gui
To use gp-saml-gui to connect to USU's GlobalProtect VPN, run the following command in your terminal window:
Most Distros
gp-saml-gui --gateway gp.usu.edu -SManjaro
gp-saml-gui --no-verify --allow-insecure-crypto --gateway gp.usu.edu -S
The above command should cause a new window to open, asking you to log in to your USU account. Enter your credentials and authenticate with Microsoft MFA.
You'll be asked for your sudo password by Openconnect.
Example of authentication prompt from Openconnect
You’re connected!
Once authenticated, you should be connected to the USU VPN over OpenConnect.
Terminal view after a successful VPN connection
Shutdown the VPN
To close the VPN connection, open the terminal window from before, and press “ctrl + c”. You can also end the VPN connection by closing the Terminal window.