IPSec + Forticlient VPN + SAML?

Until now we’ve used SSL vpn with SAML authentication with Microsofts Entra ID as IDP. However since we want to stop using SSL VPN due to the deprecation, I’m wondering what setup makes most sense when fitting the requirement of entra ID as IDP with SAML. What’s your experience with IPsec for forticlient and with SAML, and how is the deployment? So far we’ve used intune app for a preconfigured forticlient for SSL VPN https://vidmate.onl/ .