Sophos Firewall v19.5: Single Sign On (SSO) in Azure AD

In this video, you'll learn how to easily configure Azure and Sophos Firewall to take advantage of the new Azure AD integration for single sign on to the Webadmin console.
Skip ahead to these sections:
00:11 Overview
00:49 Azure Configuration
04:46 Firewall Configuration
Join the Sophos Community!
community.sophos.com
More helpful videos available on Techvids!
techvids.sophos.com

[@SophosSupport]

If you have further questions, please reach out to us on community.sophos.com!

[@kamolwat_p.1755]

I was wondering if you could please show me how to configure RADIUS (SSO) use with NPS server or freeradius.

[@rajeevbawari7222]

nice. this is new for me.

[@marcusbarry1819]

Now what do you do if you have a lot of sophos firewalls and they differ in local ip. How can you redirect? DNS?

[@KuelzSiegfried]

can i use this for normal users to authenticate for client vpn? you‘re only talking about adimistrators…

[@SophosSupport]

Unfortunately, you cannot use this yet for users authentication. Currently, the firewall only supports Azure AD authentication for the web admin console. It doesn't support authentication for end users. It also doesn't support rules and policies configured to match users, such as firewall rules and SD-WAN routes.

[@evangreene7871]

@@SophosSupport Boo. That's what I'm looking for. Does anything on the market not allow you to set up port authentication using Azure AD login without setting up a middle Microsoft NPS server.

[@WillKraaijvanger]

What to do/check when 'Test Connection' gives an error instead of a success. I think I configured exactly the way it is presented, but my XG says no :( How to troubleshoot this?

[@SophosSupport]

Hello, kindly post a detailed description of the error you are encountering, and if possible, please share screenshots. You can post your question at community.sophos.com. Thank you for your time and patience, and thank you for choosing Sophos.

[@breakingcustombc2925]

Is there any issue if the user is already added to the firewall via AD integration? I keep getting "You don't have permission to sign in to the firewall". I made sure Azure-AD-SSO was at the top of Administration authentication methods.

[@SophosSupport]

Hi, please confirm if the account that you're trying to sign in with has "Administrator" privileges and are you trying to sign in to the Web Admin? You could also refer to this Community Recommended Read on setting up admin roles on Sophos Firewall: community.sophos.com/sophos-xg-firewall/f/recommended-reads/137981/sophos-firewall-profile-management-for-device-access-in-sophos-firewall

[@wilwad]

Thanks bro. So this is just for admin login. But how do you sync the Azure users into the firewall so they can be matched in the logs?

[@SophosSupport]

Hi there, Please check the following Recommended Read article on our community: - Sophos Firewall: Integrate Sophos Firewall with Azure AD: community.sophos.com/sophos-xg-firewall/f/recommended-reads/125872/sophos-firewall-integrate-sophos-firewall-with-azure-ad Hope this helps you, and for more queries, you may reach out to Sophos Community.

[@sachinshah3250]

I have sophos 19.0.1 But I can not see Azure AD SSO option in Server Type

[@SophosSupport]

Hi, this feature is on SFOS v19.5: docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Authentication/Servers/AzureAD/AuthenticationConfigureAzureAD/index.html You may want to upgrade to the latest to have this feature available. If you have further questions and concerns, please reach out to us on community.sophos.com. Thanks!

[@mikescott4008]

I imagine you'll be wanting a site to azure VPN to encapsulate this traffic etc.

[@SophosSupport]

Hi there, site to Azure VPN is not needed, as the communication between Azure and the Firewall is already encrypted. If you have further questions, please reach out to us on community.sophos.com.

[@crackwitz]

thumbs up for pronouncing "azure" like it's meant to be, rather than how so many others do it

[@jonathannezzi6924]

Great!!