Feature #11920
open
SAML Authentication for pfSense (VPN and webConfigurator)
0%
Description
A customer has requested SAML authentication support for things like Azure as an alternative to LDAP and RADIUS. Please reference internal ticket number 84890 for more details.
There are some projects that exist for making the webConfigurator work with SAML for authentication. See here:
https://github.com/jaredhendrickson13/pfsense-saml2-auth
Additionally, it seems that OpenVPN has support for this as an authentication method.
Updated by Viktor Gurov
Updated by jeffrey Smith almost 3 years ago
Have been told in https://forum.netgate.com/topic/182512/login-security-phishing-resistant-mfa/ that this was discussed internally and there are non-trivial issues with implementing this. Any chance of adding this list to the feature request.
Updated by Wagner Ferreira about 2 years ago
That would be great, I'm changing my LOCAL AD to Microsoft Entra ID and I now need to authenticate my VPN with it.
Updated by Tue Madsen 29 days ago
Yes, I have customers where this would be a major score as well. Especially for IPSEC VPN two factor auth support.