How to force FClient to only validate connections only via SSO

[lexdef]

Hi all,

Users connecting via VPN must be validated via SSO (the IdP is Azure). The problem arises if the user chooses to authenticate via LDAP; the queries reach the server, allowing an attacker to cause a DoS.

Force this option in fclient is not an option cause anyone from outside our organization could do it.

Has anyone encountered this problem?

Thnks in advance!

[yderek]

HI, lexdef

Is your intention to block the Dos/DDOS attack targeting on your LDAP server using SSLVPN ?

When you say the user trying to use LDAP credentials, do they successfully logged in? Or you just seeing the attempt that some random user trying to access your SSLVPN using LDAP credential against your LDAP server 

[lexdef]

Hi yderek,

What I need is to force fclients to log in with SSO, and disable this authentication via LDAP.

If the user decides to authenticate via LDAP the query could arrive at the server, and an attacker could cause a DoS attack.

Thanks!