Is there another IPsec VPN Client apart from FortiClient that supports SAML/SSO?

[gettyu]

I'm in the lookout for a new VPN Client as FortiClient has been a pain in the behinds. Especially as some core features are behind a paywall...

I'm currently seeking alternatives that support SSO. Unfortunately i'm not aware of any.

Is there any client VPN you guys use that is much better than FortiClient and support SSO?

[johnathan]

The way that the FortiGate does SAML is kinda proprietary, there wouldn't be a drop in replacement.
You can try this 3rd party replacement for FortiClient, but it only does SSLVPN and not IPsec: https://github.com/adrienverge/openfortivpn

[pminarik]

A standard for doing SAML with IPsec doesn't exists, so all solutions will necessarily be custom/proprietary.

The Forti-solution is surprisingly "normal" in that it doesn't really implement any completely new protocols for this, it just stitches standard stuff into a custom flow of events (I don't know how much I can reveal about it, but a dedicated curious person with a FortiGate and FortiClient should be able figure this out).

[anarine]

I use the free forticlient vpn and it works with saml/sso