We use a specific identity provider for SSO. Which VPNs support SAML authentication with this provider?

If you tell me which identity provider you are using (e.g., Okta, Azure AD/Entra ID, Ping Identity, OneLogin) and which VPN clients or hardware you are considering (e.g., Palo Alto, Fortinet, Cisco AnyConnect, OpenVPN, Tailscale), I can give you a precise compatibility list and configuration guidance.

Yes—but I need the name of your identity provider to give you an accurate VPN list.

For example, if you mean Microsoft Entra ID, documented VPN integrations include:

• Cisco Secure Firewall / Secure Client
• Fortinet FortiGate SSL VPN
• Palo Alto Networks GlobalProtect
• F5 BIG-IP Access Policy Manager
• Pulse Connect Secure
• Perimeter 81
• Zscaler Private Access

If you mean Okta, Cisco ASA VPN, for example, supports SAML 2.0 with Okta, including SP- and IdP-initiated SSO.

Tell me the specific IdP (e.g., Okta, Entra ID, Ping, OneLogin, JumpCloud, Google Workspace, etc.), and I can give you a current comparison of VPNs that support it via SAML, including any important limitations such as MFA, group/role mapping, client support, and licensing.

Yes—but I need the name of your identity provider (IdP) to give you an accurate list.

SAML support varies by both the VPN platform and the IdP. For example:

• Cisco Secure Client / AnyConnect — supports SAML 2.0 VPN authentication; Cisco documents integrations including Microsoft Entra ID.
• FortiGate SSL VPN — supports SAML SSO, including Microsoft Entra ID.
• Palo Alto GlobalProtect — has a documented Microsoft Entra SSO integration.
• OpenVPN Access Server — supports SAML authentication (Access Server 2.11+).
• Cloudflare One / Zero Trust — supports generic SAML 2.0, so it can work with an IdP even if that IdP isn't explicitly listed.

Tell me the IdP—for example Okta, Microsoft Entra ID, Ping Identity, JumpCloud, OneLogin, Auth0, Keycloak, or another provider—and I'll research the current VPN options and give you a compatibility table.

To figure out which VPNs support SAML authentication with your specific identity provider (IdP), I'll need a bit more context.

Could you please tell me:

• What is the name of your identity provider (e.g., Okta, Azure AD / Entra ID, Ping Identity, OneLogin, Google Workspace)?
• Are you looking for enterprise hardware/software VPNs (like Palo Alto, Fortinet, Cisco) or commercial/consumer VPNs (like NordLayer, ExpressVPN)?

Once you let me know, I can give you a tailored list of compatible VPN solutions!

To give you the exact list of VPNs that support SAML authentication, I need a little more context about your setup.

Could you tell me:

• Which identity provider you are using (e.g., Okta, Azure AD/Entra ID, Ping Identity, OneLogin)?
• Do you have a preference for hardware-based or software-only VPN clients?

Let me know so I can tailor the compatibility list for your environment.

Which identity provider do you use (for example, Okta, Microsoft Entra ID, Google Workspace, Ping Identity, or OneLogin)? Once you tell me the provider, I can identify VPN products that support SAML with it.

Sure — which identity provider are you using (for example, Okta, Microsoft Entra ID/Azure AD, Google Workspace, OneLogin, Ping Identity, etc.)?

Once you name it, I can check current VPN offerings that support SAML SSO with that specific IdP and compare them.

Most major enterprise VPN solutions—spanning traditional hardware gateways, enterprise firewalls, and cloud-native mesh networks—fully support SAML 2.0 authentication.

Major enterprise VPN vendor compatibility with standard Identity Providers (such as Okta, Microsoft Entra ID / Azure AD, Google Workspace, and Ping Identity) includes:

• Palo Alto Networks GlobalProtect — Supports SAML 2.0 natively for portal and gateway access, allowing integration with Okta, Entra ID, and Google Workspace via external SAML identity provider server profiles. Setup documentation is available via Palo Alto Networks TechDocs.
• Cisco ASA / FTD (AnyConnect / Secure Client) — Supports SAML 2.0 authentication for remote access VPN tunnels, commonly paired with Microsoft Entra ID or Okta for MFA enforcement. Configuration references can be explored through Cisco Configuration Guides.
• Fortinet FortiGate (FortiClient VPN) — Supports SAML SSO authentication for SSL-VPN and IPsec remote access. Integrates smoothly with major IdPs like Azure AD/Entra ID and Okta. Guides are hosted on Fortinet Documentation.
• Tailscale — Relies completely on external SSO/SAML/OIDC identity providers rather than native passwords. It natively or custom-supports Okta, Microsoft Entra ID, Google Workspace, and OneLogin. Administration details are outlined in Tailscale Docs.
• NordLayer — Offers centralized SAML/SSO integration accommodating Okta, Microsoft Entra ID (Azure AD), Google, JumpCloud, and OneLogin. Setup steps are detailed in NordLayer Help Center.

To narrow down the exact integration steps or verify compatibility, please let me know:

• Which specific Identity Provider (IdP) you are using
• Which VPN solution your organization currently has deployed

Yes—several enterprise VPN platforms support SAML 2.0 for SSO, including Cisco Secure Client/AnyConnect and OpenVPN Access Server. Cisco documents SAML support for its ASA/FTD VPN deployments, while OpenVPN Access Server 2.11+ supports SAML with third-party IdPs.

However, which VPNs work with your specific identity provider depends on the provider and sometimes on the VPN's SAML implementation.

Which IdP are you using—for example Okta, Microsoft Entra ID, Ping Identity, OneLogin, Google Workspace, JumpCloud, Auth0, or Keycloak? If you give me its name, I can identify the VPNs that officially support it and compare them.

Could you tell me which specific identity provider you are using (e.g., Azure AD/Entra ID, Okta, Ping Identity, OneLogin) so I can let you know which VPNs support SAML integration with it?