R81 Identity Awareness Integration with Azure AD

[Shay_Levin]

Hi All,

Here is a walkthrough on how to make the integration for users authenticating in the access rule against Azure AD.

[Paul_Grigg]

Two similar videos are available in the R81 IDA admin guide:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/Topic...

[jesusarteria]

I have a question, is it possible to integrate it to only read the AD but not using the captive portal?

Regards

[PhoneBoy]

The only way to get the information we need for Identity Awareness from Azure AD is by being a SAML Service Provider.
This requires using Captive Portal. 

[Tobias_Moritz]

What's about the Identity Agents? They were and are always the recommended choice instead of Captive Portal or even Identity Collector for customers who need a precise user to ip mapping (due to the keep-alive-mechanism).

Did I miss something, or are they still lacking SAML support in most recent versions? If yes, is it on the road map for R82?

[PhoneBoy]

Identity Agents were designed to handle on-prem AD.
I don't know what the plan is (or if it's even feasible) to support Identity Agents with SAML. 
If you have this requirement, it's best to involve your local Check Point office.