AAD, InTune connected devices & FG Authentication

Hi All!

We have a significant number of InTune joined devices that authenticate against Azure Active Directory (AAD).

We need to work out a way of authenticating to these clients to the Fortigate.  We have connected the FG to AAD for the VPN with groups etc. which works well.  But, for normal clients, there seems no workable solution.

Anyone had this problem and have a solution?

Thanks,

Jon