Cloudpath and Azure AD SAML Authentication

We have an environment where we have got on-prem AD synced with Azure AD, we have just started to implement the cloud hosted cloudpath environment to integrate with our Azure hosted VSZ controllers

What we want to do is have cloudpath use the Azure AD as an authentication server, for BYOD and guest sponsorship. Eliminating the need to open ports to our on-prem AD servers.

I see support for google and others but no documentation for Azure AD
is it supported? has anyone else done it?

Thanks in advance