Troubleshooting Tip: FortiClient EMS Cloud using 'emsproxy-v2' SP address in SAML configuration

Description

This article describes how to troubleshoot FortiClient EMS Cloud using an 'emsproxy-v2' SP address in SAML configuration.

Scope

 FortiClient EMS Cloud v7.2 and v7.4 onwards.

Solution

When an end user attempts to join FortiClient EMS Cloud using an invitation code with SAML user verification, after Entra ID authentication is successful, the web browser returns an error:

'ABCD.fct-prod-emsproxy-v2.forticloud.com' closed the connection

Solution:

1. Go to FortiClient EMS -> User Management -> SAML Configuration.

2. Edit the existing SAML configuration.

3. Check on the SP Address. If it is showing 'fct-prod-emsproxy-v2.forticloud.com', it is unusable and incorrect.
   
   

   

   
   

4. To remediate this, add a new SAML configuration.
   
   

   

   
   

5. Ensure that the SP address ends with 'forticlient-emsproxy.forticloud.com'.
   
   

   

   
   

6. Configure the rest of the SAML configuration and save it.

7. Edit the existing invitation code to use this newly created SAML configuration. End users would be able to join EMS Cloud using the new SAML configuration.