When new policies are pushed or after a specified interval of time, you may need to reauthenticate.
A notification appears in the Notification Bell five minutes before you must confirm your password. If you do not respond within that time, you will be signed out.
When reauthentication is required, the appropriate message window opens.
Password authentication
This is typically your domain password unless your administrator advises otherwise. Enter your password and click Authenticate to continue.

SAML authentication
If you signed in using a SAML/OIDC identity provider, the SAML authentication window appears. Click Authenticate to continue.

Your browser then prompts you for credentials. Use the same credentials you used the last time you authenticated with your SAML identity provider. If the browser auto-completes your password, a blank window may appear briefly. Close it after the AppGate ZTNA client shows Connected.
If you do not want to reauthenticate now, close the window. It reopens when needed.