Hi @Gabriel Moraes , the specific scenario you described would require additional configuration and integration between Entra ID and FortiGate Firewall.
You would need to configure Entra ID as an identity provider in FortiGate Firewall and then configure SSO with DL groups. This would involve setting up a trust relationship between Entra ID and FortiGate Firewall, configuring the necessary SAML settings, and mapping the DL groups to the appropriate roles in FortiGate Firewall.
The exact steps required to configure this scenario would depend on the specific versions of Entra ID and FortiGate Firewall you are using, as well as the specific requirements of your environment.
I'm not familiar with FortiGate but it looks like users have done similar before. Let me know what questions you have and I can help you further!
Best,
James