Forticlient with AzureAD MFA

[kubasolan]

Hi everyone,

I'm currently configuring an Ipsec VPN with a Fortigate device and I was wondering if it's possible to connect the Fortigate to AzureAD to make the users authenticate through their AzureAD user including the MFA from there when connecting with Forticlient VPN.

is this possible or if you want to use the MFA for the vpn you are bound to licensed forticlient?

Thank you in advance!

[pminarik]

If by "Azure AD" you mean SAML authentication, then that is currently not supported in combination with IPsec. You would have to switch to SSL-VPN.

If on the other hand you meant just the Azure MFA plugin for NPS (=RADIUS authentication), then that is certainly supported. I suspect you will have more success with IKEv1, since XAUTH has no problem with MFA.