FortiClient Remote SSL VPN with Azure/Azure MFA Authentication

More and more people are using Azure as their primary identity provider, thanks in no small part to the massive success of Office/Windows 365. So if you want to provide a FortiGate/FortiClient SSL remote access VPN solution then securing it via Azure makes a lot of sense.
FortiClient Azure Authentication
www.petenetlive.com/kb/articl...

[@iainstark1122]

Thank you so much. This was so helpful and saved me so much time!!!

[@devo301]

Thank you very much for this amazing video!

[@TastyChickenLegs]

Very well done. Thank you.

[@MG-217]

Great stuff - thank you VERY much

[@Stan_sprinkle]

If you have an EMS invitation code for one computer and you try to use it on another (from Windows to Mac, in my case)? Presumably it won’t work because the invitation code is tied to the specific machine? I was able to plug into the EMS code on my Mac and connect to my VPNs, but not able to access the sites behind my firewall. I can’t see where it’s failing, but I’m assuming because the invitation code was created for a diff machine, I’d don’t have the right certificates?

[@jimmypayne8435]

Great great video here. Wondering how you would do this if you had 2 available firewalls for VPN users to login to?

[@alexeimccarthy6417]

Great video

[@fabs12212]

is it possible to add more groups in azure in fortigate?

[@devo301]

Which FortiClient Version did you use?

[@cantfunction98]

better than the official fortinet guide

[@gdhomy2009]

how do you create the public signed certificate

[@Traumatree]

This is nice, but I didn't see anything about MFA when you logged in via the FortiClient. Your account on Azure wasn't set for MFA I think.

[@techcerotops]

This video is great but it seems that you need AZURE AD PREMIUM P2 in order to grant access to groups. That is a really significant investment. Is there a way to work around that?

[@techcerotops]

@Daniel Eduardo Avila Ledesma well just to be clear, I don't have either of those things, just the free tier.

[@ravikanchi8]

How to configure with AD on premise with azure MFA only, user should authenticate with on premises AD and MFA should use Azure