Since the controller can already use SAML to authenticate admins/operators, and recently support for Google authentification has been added to the biult-in captive portal, I wonder if in the near future SAML for portal could be integrated ?

I couln't find any other way to authenticate portal with EntraID without using external hardware.

Since in on of the projects I'am working on, the school want's to eliminate server hardware, I don't have the option to host any RADIUS/NPS/ext portal on premise.

Benefits:

-Enabling users to log-in to the network with a microsoft account

-Ability to use 2FA unlike RADIUS, LDAP or 802.1x
-No need for external hardware