Skip to main content

VPN Clients and Supported Authentication Methods

Introduction

Use this guide to access information pertinent to the supported authentication method for the VPN client integrated with SecureAuth IdP

Note

Refer to the document Network Products and Supporting Authentication Methods for information about network products and authentication methods supported by SecureAuth IdP

VPN Clients

Cisco

Cisco AnyConnect

Authentication Method

Supported Versions

Notes

SAML

X.509

RADIUS OTP

Desktop VPN Client

See Notes

Y

Y

2.5, 3.x

No SAML support for Cisco at this time

Android VPN Client

See Notes

Y

Y

3.x

No SAML support for Cisco at this time

iOS VPN Client

See Notes

Y

Y

3.x

No SAML support for Cisco at this time

Citrix

Citrix R

Authentication Method

Supported Versions

Notes

SAML

X.509

RADIUS OTP

Desktop VPN Client

See Notes

See Notes

Y

SAML:

  • Desktop Receiver client does not support SAML yet – tested with Windows client 4.3.1.00 and Mac

  • Web receivers support SAML

X.509

  • Works only with smart cards / legacy configuration

Android VPN Client

See Notes

See Notes

Y

SAML:

  • Receiver needs to be configured manually for Web interface option

X.509

  • No support for certificates authentication

iOS VPN Client

See Notes

Y

Y

SAML:

  • Web interface only

F5

F5 Edge

Authentication Method

Supported Versions

SAML

X.509

RADIUS OTP

Desktop VPN Client

Y

Y

Y

11.2.0+

Android VPN Client

Y

Y

Y

11.2.0+

iOS VPN Client

Y

Y

Y

11.2.0+

Fortinet

FortiGate SSL VPN Support

FortiClient

Authentication Method

Supported Versions

SAML

X.509

RADIUS OTP

Desktop VPN Client

N

N

Y

Windows 4+

Android VPN Client

N

N

Y

Android 4.4.3+

iOS VPN Client

N

N

Y

iOS 5+

Juniper Networks

Junos Pulse Secure v8.0

Cisco AnyConnect

Authentication Method

Supported Versions

Notes

SAML

X.509

RADIUS OTP

Desktop VPN Client

See Notes

Y

Y

3.x, 4.x, 5.0

SAML:

  • Pulse desktop client 5.0 and Juniper OS 8.0+ supports SAML

Android VPN Client

See Notes

Y

Y

3.0, 4.x

SAML:

  • Pulse client uses EAP for authentication and therefore will not work with SAML

iOS VPN Client

Y

Y

Y

3.0, 4.x

Junos Pulse Secure v8.1+

Junos Pulse Secure v8.1+

Authentication Method

Supported Versions

Notes

SAML

X.509

RADIUS OTP

Desktop VPN Client

Y

Y

Y

5.1x to 5.1RY

Android VPN Client

See Notes

Y

Y

5.1x to 5.1RY

SAML:

  • Pulse client uses EAP for authentication and therefore will not work with SAML

iOS VPN Client

Y

See Notes

Y

5.1x to 5.1RY

X.509

  • Apple does not support Pulse yet in IPCU, so auto provisioning does not function, though manual addition of certificate profile functions

Palo Alto Networks

GlobalProtect

Authentication Method

Supported Versions

SAML

X.509

RADIUS OTP

Desktop VPN Client

N

N

Y

10.6+ with Windows OS: Vista, 7, 8.1, 10

Android VPN Client

N

N

Y

Android 4.0.3

iOS VPN Client

N

N

Y

 

WatchGuard

GlobalProtect

Authentication Method

Supported Versions

SAML

X.509

RADIUS OTP

Desktop VPN Client

N

N

Y

Windows OS: XP, Vista, 7, 8.1, 10

Android VPN Client

N

N

Y

4.x+

iOS VPN Client

N

N

Y

iOS 4.3+

In this section: