The SonicWall network security appliance (firewall) provides a mechanism for managing locally and remotely authenticated users. User-level authentication gives users access to the LAN from remote locations on the Internet and allows you to enforce or bypass content filtering policies for LAN users attempting to access the Internet. You can also permit only authenticated users to access VPN tunnels and send data across the encrypted connection.
The firewall authenticates all users when they attempt to access network resources in a different zone (such as WAN, VPN, or WLAN), which causes the network traffic to pass through the firewall. The firewall does not authenticate users who log into a computer on the LAN but performs only local tasks. User-level authentication can be performed using a local user database, LDAP, RADIUS, a combination of the local database with either LDAP or RADIUS, or SAML with an external IdP. Authentication using LDAP or RADIUS servers can be more efficient for networks with many users.
SonicOS offers Single Sign-On (SSO) capabilities, which can be used with LDAP.