Passive authentication using FSSO when AD is in Azure

[ChrisJackson_NCL]

We currently use passive authentication for web filtering using FSSO with a collector agent installed on a local domain controller.

We are finding more and more situations where local domain controllers are being decomissioned in favour of Azure based AD and wish to know if passive authentication is supported in this way.

Our only resource to go off is https://docs.fortinet.com/document/fortigate/7.2.5/administration-guide/33053 but as we haven't attempted before, perhaps someone who has can shout up and advise whether or not this is the answer, or advise whether or not passive authentication is supported.

Thanks in advance!

[Anthony_E]

Hello Chris,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[MMAT]

Did you attempt the SAML Captive Portal? If not what did you end up doing? We’re in the same boat at the moment. 

[ChrisJackson_NCL]

Yes we now use SAML Captive Portal for SSO authentication with Azure AD