website VS GlobalProtect-openconnect

In order to reach a client's domain for a project, my team needs to use a VPN and the instructions were pretty clear regarding which tool to use - GlobalProtect VPN - so I've installed https://github.com/yuezk/GlobalProtect-openconnect and was able to connect successfully.

Use this one instead https://github.com/yuezk/GlobalProtect-openconnect

Sometimes you may want to use some software in your project, but the maintainer(s) may have some functional affiliation(s) that makes it difficult to use without significant security assessment effort.

Example here: GlobalProtect is VPN software from Palo Alto Networks, but the maintainer of this open source client is based in China. He may be a fine, upstanding person, the code may be pristine, but there's systemic risk that needs to be bought down.

What are your tools of choice to assess something like this?

https://github.com/yuezk/GlobalProtect-openconnect

Ooh yes I recently went through this. This is the one that finally worked: https://github.com/yuezk/GlobalProtect-openconnect

I've seen this on Linux too, specifically with this VPN application https://github.com/yuezk/GlobalProtect-openconnect

Closing it via the "x" will minimize to tray and hide (which is the behavior I want, but an example nonetheless)

I work for a Uni running eduroam. Mine isn't hostile to Linux, but it is definitely a second class citizen. I run Linux where I can. I don't know where you are, but openconnect can probably work for you. Specifically, I use https://github.com/yuezk/GlobalProtect-openconnect/ on top of openconnect for SAML auth. Might be worth the try for you.

I'm not familiar with the service and software can only be downloaded and installed via the customer portal. Would something like GlobalProtect-openconnect or gp-saml-gui suffice?

Solution to the GlobalProtect problem is to install the non-official client https://github.com/yuezk/GlobalProtect-openconnect and follow the fix in issue #142 on the github repo.