topic Re: Azure IDP object for remote access vpn in SASE and Remote Access

Azure IDP object for remote access vpn

Gaurav_Pandya — Tue, 24 Jan 2023 09:46:19 GMT

We are using Azure IDP SAML authentication for mobile access vpn. It is working fine.

We want to use same object for remote endpoint client as well but getting below error when selected SAML authentication for endpoint client.

We need to create another IDP object which has remote vpn access as service or there is any way we can use same object.

Re: Azure IDP object for remote access vpn

Blason_R — Tue, 24 Jan 2023 09:48:54 GMT

Are you talking about Endpoint VPN client?

Re: Azure IDP object for remote access vpn

Nüüül — Tue, 24 Jan 2023 10:09:08 GMT

Hi,

did you try to set the Service in Identity Provider settings to "Remote Access VPN"?

Mobile Access is only used for Web Portal, at least what I saw so far (correct me if I´m wrong)

Re: Azure IDP object for remote access vpn

Gaurav_Pandya — Tue, 24 Jan 2023 10:31:55 GMT

We are using mobile access VPN with SNX and using web portal. Now we want to use in endpoint client as well.

Re: Azure IDP object for remote access vpn

Nüüül — Tue, 24 Jan 2023 10:36:27 GMT

as far as i understood you will need a different IDP configuration for client vpn
(on both side - checkpoint and aad)

Tutorial: Azure Active Directory single sign-on (SSO) integration with Check Point Remote Secure Access VPN - Microsoft Entra | Microsoft Learn

Re: Azure IDP object for remote access vpn

Gaurav_Pandya — Mon, 30 Jan 2023 10:13:00 GMT

Thanks. So I need to create another object for IDP in firewall and another application in Azure.

Re: Azure IDP object for remote access vpn

HamzaMoualdi — Mon, 17 Apr 2023 22:40:56 GMT

Hi Gaurav_Pandya,

You are using which version of Gaia please ?
Because, I tried to use two IDP for EndPoint VPN and Mobile Access, but I don't Know if Mobile Access is supported by SAML ?

Re: Azure IDP object for remote access vpn

Gaurav_Pandya — Tue, 18 Apr 2023 13:14:41 GMT

Hi,

Yes, mobile access supports SAML authentication. Currently we are using 2 IDP objects, one for mobile access and another for endpoint vpn client.

Re: Azure IDP object for remote access vpn

HamzaMoualdi — Wed, 19 Apr 2023 07:31:45 GMT

Hi,

Thanks for your reply.

Which version please ?

Re: Azure IDP object for remote access vpn

Gaurav_Pandya — Wed, 19 Apr 2023 08:04:59 GMT

We are using R81.10 version on gateways and R81.20 on mgmt.

Re: Azure IDP object for remote access vpn

PhoneBoy — Thu, 20 Apr 2023 23:11:34 GMT

I believe MAB has supported SAML since R80.40.