Need guidance on setting up FortiGate RA VPN

[albaker1]

We're in the process of upgrading our AnyConnect to FortiClient. What we're trying to accomplish is tie authentiation into our SAML SSO with MFA. We want to be able to provide segmentation  to the VPN users, that is, we want to control which systems the VPN users have access to. It appears we can accomplish this with FortiClient EMS, which we'll be purchasing soon, but I'm getting a bit wrapped around the axle in understanding the entire process. I believe I'm good in configuring the SAML SSO with MFA a the firewall, but outside of the FortiClient EMS, is there anything else we need to purchase or provision? I'll continue to look for the documentation, but I'm getting a bit behind on the schedule.

Thank you.

[albaker1 · Accepted solution]

I ran across this, and I think this answers my questions:

https://www.youtube.com/watch?v=nDH2wvveLrI

Configure Fortigate SSL VPN to use Azure AD as SAML IDP (MFA / Conditional Access)