How to Configure MFA for Remote VPN AD users integrating with Azure Identity Spark 1600 Appliance

[Balakrishna_Med]

Hi,

Can anyone help me to configure MFA for our Remote SSL VPN users.

we have on premises Active Directory and integrated with Spark 1600 Appliance and working properly.

but now management wants to go the two-factor authentication using Azure Identity service.

Please help me

Regards

Balakrishna Medikonda

[Chris_Atkinson]

Locally or centrally managed appliance?

It was possible previously only via Radius (sk114263). See the Microsoft guidance here:

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/auth-radius

Note R81.10.05 will introduce additional MFA options.

Currently native integration to Azure AD / SAML isn't possible per sk178604.

(Please discuss this with your local SE as an RFE.)

[PhoneBoy]

Apparently, support for this integration has been added in recent SMB firmware releases.
However, it has not been formally tested as of yet and we are looking for folks to assist in testing this.
If you're interested, please let @Dafna and I know. 

[ArsathParves1]

So, Spark appliance will be able to integrate with Azure AD for Identity awareness and SSO now?

[PhoneBoy]

Still not supported per https://support.checkpoint.com/results/sk/sk178604