Microsoft Entra ID (Azure AD) server
The firewall supports Microsoft Entra ID single sign-on (SSO) authentication using OAuth 2.0/OpenID Connect (OIDC) protocols to sign in users accessing the internet through the captive portal and administrators signing in to the web admin console.
You can import all groups or only those that match specific attributes using the import group assistant. You can also apply schedule and traffic policies.
You can configure Microsoft Entra ID authentication as follows:
-
To configure Microsoft Entra ID (Azure AD) on Azure Portal, see Configure Microsoft Entra ID (Azure AD) on Azure Portal.
-
To add the server in the firewall, see Add a Microsoft Entra ID (Azure AD) server.
-
(Optional) To import groups from Microsoft Entra ID, see Import groups.
-
To allow the required URLs, see Allow Microsoft Azure URLs.
Videos
Configure Microsoft Entra ID SSO
Captive portal authentication
Note
To use Microsoft Entra ID authentication for services, such as web admin console, captive portal, user portal, and client authentication agent (CAA), you can also configure the firewall with Microsoft Entra ID using the Microsoft Entra ID Domain Services. See Sophos Firewall: Integrate Sophos Firewall with Microsoft Entra ID.