Azure AD FSSO

[MMAT]

Hi everyone, 

Looking if there is any way to get Azure AD joined devices to authenticate with FSSO which we have installed in our on prem infrastructure. 
As we are education based we have different filtering policies for Staff and Students. We have explored the possibility of 802.1x over WiFi however some InTune joined devices will be using Ethernet so not the easiest to configure. 

Is there any easy way to authenticate with FSSO and/or directly authenticate from Azure to the Fortigate? We currently have multiple Fortigates but don’t have FortiAuthenticator or Forticlient. 

[Anthony_E]

Hello MMAT,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello MMAT,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[cjackson_ncl]

Hello, we have been using FSSO for Azure AD joined devices for some time. It's not passive as it requires you to login to your Microsoft account via web-browser when you start browsing the web.

We have our own guide to configure this setup, but generally it's based off this https://docs.fortinet.com/document/fortigate/7.2.5/administration-guide/33053