SAML integration to Microsoft Entra ID with VPN authentication

Rebbe

We would like to request the implementation of SAML 2.0 support in the Zyxel USG H Series firewalls to enable Client VPN authentication via Microsoft Entra ID.

Currently, achieving this setup requires our customers to deploy a costly Site-to-Site VPN to Azure and maintain Microsoft Entra Domain Services, which adds complexity and expense. Competing vendors, such as Fortinet, offer native support for SAML 2.0 in their firewalls, making it significantly easier to integrate with modern identity providers like Microsoft Entra ID.

We believe that adding SAML 2.0 support to Zyxel’s product line would greatly enhance its competitiveness and usability in modern cloud-integrated environments.

Zyxel_Tina

Hi @Rebbe,

Thank you for your input!

After checking, Microsoft Entra ID integration will be supported in the next firmware release (v1.37). Please note that this implementation will use OAuth 2.0 instead of SAML 2.0.