VPN clients using MFA to Azure AD (IDP) ~ Secure Domain Login

[Kevin_Taylor]

Hi

Have 400 employees using MFA with the Mobile VPN client to Azure AD (IDP). Trying to authenticate using the VPN client before logging into computer (Secure Domain Login). It's hanging at the 47% and eventually drops. I suspect the linkage with the browser when using MFA is the reason I cannot authenticate before logging into the computer. I don't receive an MFA prompt, as I normally would. Has anyone got this to work? Is it even possible?

Best,

Kevin

[PhoneBoy]

SDL and SAML-based Auth for Remote Access VPN is currently not supported as documented in the Known Limitations listed here: http://downloads.checkpoint.com/dc/download.htm?ID=114551 
The only option to connect to VPN when working with SAML before log on to windows is with Machine certificate.