Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kubasolan
New Contributor

Forticlient with AzureAD MFA

Hi everyone,

I'm currently configuring an Ipsec VPN with a Fortigate device and I was wondering if it's possible to connect the Fortigate to AzureAD to make the users authenticate through their AzureAD user including the MFA from there when connecting with Forticlient VPN.

is this possible or if you want to use the MFA for the vpn you are bound to licensed forticlient?

Thank you in advance!

https://nox.tips/ https://xender.vip/
1 REPLY 1
pminarik
Staff
Staff

If by "Azure AD" you mean SAML authentication, then that is currently not supported in combination with IPsec. You would have to switch to SSL-VPN.

 

If on the other hand you meant just the Azure MFA plugin for NPS (=RADIUS authentication), then that is certainly supported. I suspect you will have more success with IKEv1, since XAUTH has no problem with MFA.

[ corrections always welcome ]
Top Kudoed Authors