Machine tunnel auth against Azure AD

I’m planning to build out a dev environment for forticlient/ems and after reading a good bit of documentation I’m wondering if I can use something other than pki for machine tunnel authentication. We have Azure AD that hooks with Okta. Since the laptops are hybrid domain joined I’m hoping I could leverage Azure AD or ldap for this low level tunnel. Once the user logs in it would prompt mfa using the Okta saml.

Has anyone tried to use Azure AD or ldap instead of pki for a machine tunnel?