SSLVPN using Azure AD (SAML)

[KeitCope]

Hello,
Does anyone know if its possible to configure an SSLVPN using Azure AD (SAML) for the user accounts?
Do I require a FortiAuthenticator to achieve this?

Does anyone know if this is not possible if its on Fortinets roadmap to implement, as LDAP becomes less common and SAML is growing?

thanks very much

[dred_FTNT · Accepted solution]

There is  FortiOS NFR 505485 for implementing the SP role in FortiGate, which would allow SSO for SSL VPN users using Azure AD as the IdP.    This would address your scenario without FAC.  
I am not sure what the status is of that NFR.   We've also seen requests for the FortiClient to support SAML SSO for tunnel mode SSL VPN. 
Please check with the FOS team for latest.