Azure IDP object for remote access vpn

[Gaurav_Pandya]

We are using Azure IDP SAML authentication for mobile access vpn. It is working fine.

We want to use same object for remote endpoint client as well but getting below error when selected SAML authentication for endpoint client.

We need to create another IDP object which has remote vpn access as service or there is any way we can use same object.

[Blason_R]

Are you talking about Endpoint VPN client?

[Nüüül]

Hi,

did you try to set the Service in Identity Provider settings to "Remote Access VPN"?

Mobile Access is only used for Web Portal, at least what I saw so far (correct me if I´m wrong)

[Gaurav_Pandya]

We are using mobile access VPN with SNX and using web portal. Now we want to use in endpoint client as well.

[Nüüül]

as far as i understood you will need a different IDP configuration for client vpn
(on both side - checkpoint and aad)

Tutorial: Azure Active Directory single sign-on (SSO) integration with Check Point Remote Secure Acc...

[Gaurav_Pandya]

Thanks. So I need to create another object for IDP in firewall and another application in Azure.

[HamzaMoualdi]

Hi Gaurav_Pandya,

You are using which version of Gaia please ?
Because, I tried to use two IDP for EndPoint VPN and Mobile Access, but I don't Know if Mobile Access is supported by SAML ?

[Gaurav_Pandya]

Hi,

Yes, mobile access supports SAML authentication. Currently we are using 2 IDP objects, one for mobile access and another for endpoint vpn client.

[HamzaMoualdi]

Hi, 

Thanks for your reply.

Which version please ?

[Gaurav_Pandya]

We are using R81.10 version on gateways and R81.20 on mgmt.

[PhoneBoy]

I believe MAB has supported SAML since R80.40.