Passive authentication using FSSO when AD is in Azure

[ChrisJackson_NCL]

We currently use passive authentication for web filtering using FSSO with a collector agent installed on a local domain controller.

We are finding more and more situations where local domain controllers are being decomissioned in favour of Azure based AD and wish to know if passive authentication is supported in this way.

Our only resource to go off is https://docs.fortinet.com/document/fortigate/7.2.5/administration-guide/33053 but as we haven't attempted before, perhaps someone who has can shout up and advise whether or not this is the answer, or advise whether or not passive authentication is supported.

Thanks in advance!

[Anthony_E]

Hello Chris,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[MMAT]

Did you attempt the SAML Captive Portal? If not what did you end up doing? We’re in the same boat at the moment. 

[ChrisJackson_NCL]

Yes we now use SAML Captive Portal for SSO authentication with Azure AD

[FA-Shams]

Hi Chris,

I am also trying to find out a passive authentication to authenticate my users before accessing the Internet but no success. Then i configured Captive portal and configured SSO with Microsoft Intune but the issue is that it always prompt to *Open Browser and Connect* when we connect to the SSID. Its very irritating for the users to click again and again. Is there any way if i can do authentication only 1 time and also the passive as well ? Looking forward your support.

[Hemin88]

Looking for similar solution too