Azure AD authentication for Sophos Connect

Hi Nez_Pottage ,

Thank you for contacting Sophos Community.

Yes. MFA from Azure AD should work. As of now, Sophos version of MFA has not supported with Azure AD. We are actively working on enhance SSO support in XG.
SFOS v19.5: Only support WebAdmin with Azure AD.

Hmm. No? Sophos Connect doesn't yet authenticate directly against Azure AD? It's still limited to ADDS/ADDC.

The last response I got from XG product support was that it's in the roadmap for 2023.

Yes RobB @ SK ,
I mean for Webadmin and MFA support with Azure AD. Captive Portal and other clients are in the roadmap.

Indeed - however it wasn't what the question was.

"Can the XG also be configured in a similar manner so that users can authenticate to SOphos Connect using their Azure AD details"

That's the pivotal part of the question, to which you said yes in your first response - that's incorrect or at least erroneous.

Clarity is key here.

Hello Bhavik24  

You said connect with capactive portal is in road map but Sophos released document for using captive portal using azure ad credentials I am attaching the link below 

even though it is not working from Sophos end 

community.sophos.com/.../sophos-firewall-integrate-sophos-firewall-with-azure-ad

Hi Surendra Gupta ,

Provided link has configure Azure AD as Active Directory option in Firewall. I think this also required paid service on Azure to work.
I am talking here about Azure AD as Azure AD SSO option in Firewall. 

FYI : The new Azure AD integration doesn't need the extra Directory Services subscription to - it will work natively with Azure AD.

Can we be clear here.

PORTAL integration is AAD native.

CONNECT integration requires ADDS and is not (yet) native.

Only Web Admin Portal integration has AAD native supported.

Bit you could use: community.sophos.com/.../sophos-xg-using-azure-mfa-for-ssl-vpn-and-user-portal