Azure Active Directory (Azure AD) is a Microsoft cloud-based identity and access management service that offers identity and access capabilities for applications that run in Microsoft Azure and for applications that run in an on-premises environment.
If you use Azure both for authentication and authorization, then Azure AD performs the authentication phase through the SAML protocol with SAML Identity Provider.
If you use Azure for authorization only you can use any authentication method.
Note - To use Azure AD, you must configure the proxy server in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on..
To configure Azure AD as an authorization method for your users:
In Microsoft Azure Portal, configure an Azure AD application.
In Microsoft Azure Portal, configure SAML as a Single Sign-On for your Azure application.
In Microsoft Azure Portal, register your application.
On Check Point SmartConsole, configure Azure object.
On Check Point SmartConsole, create the Access Role with the Azure directory.
For more information, see Using Azure AD for Authorization.