How to integrate XG SSL VPN with Azure AD

Hi  

Thanks for sharing your suggestion!

Let me follow up with the team. I'll reply back when I have an update.

Regards,

Hi Luk,

Azure AD is not supported in XG right now. 

Background is, the LDAP queries of Azure AD are not quite the standard to LDAP of AD. 

LuCar Toni, 

Natively is not supported but...I would like to know if by using XG as Radius client can do the trick like competition do.

For example:

https://forum.fortinet.com/tm.aspx?m=163835

https://docs.microsoft.com/en-ca/azure/active-directory/authentication/howto-mfa-nps-extension-vpn

https://www.reddit.com/r/fortinet/comments/e8jia8/fortigate_ssl_vpn_windows_radius_and_azure_mfa_w/

Sorry to mention the competition but some workarounds can work if technically is possible. So, could you guys investigate and check if with XG is possible?

Since I already received a tender where XG can fit and I have other customers moving AD completely to Azure (I do not agree with this approach at all!) but for these customers, XG is automatically discarded.

Hope you understand and can investigate

Regards

LuCar Toni, 

Natively is not supported but...I would like to know if by using XG as Radius client can do the trick like competition do.

For example:

https://forum.fortinet.com/tm.aspx?m=163835

https://docs.microsoft.com/en-ca/azure/active-directory/authentication/howto-mfa-nps-extension-vpn

https://www.reddit.com/r/fortinet/comments/e8jia8/fortigate_ssl_vpn_windows_radius_and_azure_mfa_w/

Sorry to mention the competition but some workarounds can work if technically is possible. So, could you guys investigate and check if with XG is possible?

Since I already received a tender where XG can fit and I have other customers moving AD completely to Azure (I do not agree with this approach at all!) but for these customers, XG is automatically discarded.

Hope you understand and can investigate

Regards

I do not have the License in Azure to integrate this.

So maybe somebody in the Community can test this with the proper enterprise AD License. 

If Azure AD uses Standards in Radius... Why not? Should work. If they uses different Protocols, could not work. 

LuCar Toni said:

I do not have the License in Azure to integrate this.

Thanks LuCar Toni. I have the same issue. I could ask to some customers but it is not feasible and it requires time.

If you can push and investigate from your side, it is a nice feature that can show how XG integrates with Azure MFA.

Thanks