diff --git a/pkgs/tools/networking/gp-saml-gui/default.nix b/pkgs/tools/networking/gp-saml-gui/default.nix
new file mode 100644
index 00000000000..3e343b3715d
--- /dev/null
+++ b/pkgs/tools/networking/gp-saml-gui/default.nix
@@ -0,0 +1,46 @@
+{ lib
+, stdenv
+, fetchFromGitHub
+, buildPythonPackage
+, webkitgtk
+, wrapGAppsHook
+, glib-networking
+, gobject-introspection
+, openconnect
+, pygobject3
+, requests
+}:
+buildPythonPackage rec {
+  pname = "gp-saml-gui";
+  version = "0.1";
+
+  src = fetchFromGitHub {
+    owner = "dlenski";
+    repo = "gp-saml-gui";
+    rev = "085d3276e17e1094e22e5d49545e273147598eb4";
+    sha256 = "sha256-5vIfgDaHE3T+euLliEyXe+Xikf5VyW3b9C2GapWx278=";
+  };
+
+  buildInputs = lib.optional stdenv.isLinux glib-networking;
+
+  nativeBuildInputs = [ wrapGAppsHook gobject-introspection glib-networking ];
+
+  propagatedBuildInputs = [
+    requests
+    pygobject3
+    openconnect
+  ] ++ lib.optional stdenv.isLinux webkitgtk;
+
+  preFixup = ''
+    gappsWrapperArgs+=(
+      --set WEBKIT_DISABLE_COMPOSITING_MODE "1"
+    )
+  '';
+
+  meta = with lib; {
+    description = "Interactively authenticate to GlobalProtect VPNs that require SAML";
+    homepage = "https://github.com/dlenski/gp-saml-gui";
+    license = licenses.gpl3Only;
+    maintainers = [ maintainers.pallix ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 45d9fb0a906..caafe81ff57 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1537,6 +1537,8 @@ with pkgs;
 
   godspeed = callPackage ../tools/networking/godspeed { };
 
+  gp-saml-gui = python3Packages.callPackage ../tools/networking/gp-saml-gui { };
+
   guestfs-tools = callPackage ../tools/virtualization/guestfs-tools { };
 
   fabs = callPackage ../tools/backup/fabs { };