I'm trying to find out if the following is possible.   We want an Azure hosted VMX to make a site to site IPSEC tunnel to an application provider. easy so far   We also want the VMX to terminate Client VPN's using SAML with Entra ID as an identity provider and utilise Microsoft Authenticator to MFA the connections.   What we are trying to achieve is for remote workers to VPN to the vMX, authorise it with Microsoft Authenticator, and once connected be able to route traffic through the site to site IPSEC tunnel to get to the secure app.   Is this feasible? thanks for reading! ... View more