Maybe I'm too late, but I've heard about VPN SSL SSO using SAML so, you
can configure it to use it with Azure SSO or FortiAuthenticator as IdP.
Check this link
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Create-SSL-VPN-with-Azure-SAML-S...
