Hi everyone,
I'm currently configuring an Ipsec VPN with a Fortigate device and I was wondering if it's possible to connect the Fortigate to AzureAD to make the users authenticate through their AzureAD user including the MFA from there when connecting with Forticlient VPN.
is this possible or if you want to use the MFA for the vpn you are bound to licensed forticlient?
Thank you in advance!
If by "Azure AD" you mean SAML authentication, then that is currently not supported in combination with IPsec. You would have to switch to SSL-VPN.
If on the other hand you meant just the Azure MFA plugin for NPS (=RADIUS authentication), then that is certainly supported. I suspect you will have more success with IKEv1, since XAUTH has no problem with MFA.
User | Count |
---|---|
1926 | |
1144 | |
770 | |
447 | |
282 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.