SolutionįortiGate will be acting as Service Provider (SP) and GOOGLE will be acting as Identity Provider (IdP).įortiGate admin access SSO is part of the security fabric where the FortiGate can act as SP or IdP for SAML authentication.

Repeat the steps for each FAZ/FMG that is to be set as a service provider.This article describes how to troubleshoot FortiGate admin access configuration with Google SAML authentication.

Confirm that the information is correct and select Apply.

If this is a first-time set up, you can import the IdP certificate that you downloaded while configuring the IdP device. Enter the IdP IP address and the IdP prefix that you obtained while configuring the IdP device.To configure FortiAnalyzer as a service provider:

A custom login page can be created by moving the Login Page Template toggle to the On position and selecting Customize.

If the SP is not a Fortinet product, select Custom as the SP Type and copy the SP Entity ID, SP ACS (Login) URL, and SP SLS (Logout) URL from your SPs configuration page.

In the Edit Service Provider window: l Enter a name for the SP.

In the SP Settings table, select Create to add a service provider.

Select Download to get the IdP certificate, used later to configure SPs.

In the IdP Certificate dropdown, choose a certificate where IdP is used.

After successful authentication, you can access other SP devices from within the same browser without additional authentication. Logging into an SP device will redirect you to the IdP login page.

The current device is indicated with an asterisk (this feature is currently only supported in FAZ/FMG). FortiAnalyzer can play the role of the identity provider (IdP) or the service provider (SP) when an external identity provider is available.ĭevices configured to the IdP can be accessed through the Quick Access menu which appears in the top-right corner of the main menu. SAML can be enabled across all Security Fabric devices, enabling smooth movement between devices for the administrator.

Fortigate saml