Can Azure SAML work together with Duo?

[R.Tudon]

Hi guys! 

I was trying to make our VPN accessible thru SSO using azure SAML, but I was wondering if after successfully authenticate with Azure, DUO could send me a push up notification, 

It's this possible?

[JayGolf]

Hi @R.Tudon ,

Sure can! The config is mainly between Azure and DUO, once that is setup then all you need to do on the Palo is set up your SAML iDP by importing the metadata from Azure. Once iDP is imported into the Palo, you'll have to create the appropriate Auth Prof referencing the iDP and then attach that to your Portal/GW. 

On the Azure side, Conditional Access is where you can setup DUO. For DUO, check out DUO Two-Factor Auth for Microsoft Entra ID.