Skip to main content
kubasolan
New Member
August 24, 2022
Question

Forticlient with AzureAD MFA

  • August 24, 2022
  • 1 reply
  • 1227 views

Hi everyone,

I'm currently configuring an Ipsec VPN with a Fortigate device and I was wondering if it's possible to connect the Fortigate to AzureAD to make the users authenticate through their AzureAD user including the MFA from there when connecting with Forticlient VPN.

is this possible or if you want to use the MFA for the vpn you are bound to licensed forticlient?

Thank you in advance!

1 reply

pminarik
Staff
Staff
August 26, 2022

If by "Azure AD" you mean SAML authentication, then that is currently not supported in combination with IPsec. You would have to switch to SSL-VPN.

 

If on the other hand you meant just the Azure MFA plugin for NPS (=RADIUS authentication), then that is certainly supported. I suspect you will have more success with IKEv1, since XAUTH has no problem with MFA.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.