Technical Tip: Configuring DUO SAML for Administrative Access on FortiGate
| Description | This article provides steps to integrate DUO Security with FortiGate using SAML authentication for administrator access. The application type used is 'Fortinet FortiGate Administrators - Single Sign-On'. |
| Scope | FortiGate. |
| Solution | To set up DUO, follow this link: DUO SSO for FortiGate Admin.
DUO Configuration (SP and IdP full settings):
Note: On the Service Provider section, ensure the Custom attributes are enabled to avoid the 'SAML assertion attributes are misconfigured and do not contain the 'username' attribute/claim' error message.
FortiGate configuration:
Go to Security Fabric -> Fabric Connectors -> Security Fabric Setup ('Right-click' to choose edit) -> Single Sign-On Settings -> Service Provider (SP).
Note: Do not forget to add a forward slash in the SP entity ID, as DUO has configured their template with a forward slash at the end. |
