Technical Tip: FortiGate showing default login page instead of SAML may cause unwanted admin login attempts
| Description | This article describes a reported issue on some FortiOS versions that causes the firewall to continue to display the default login page after the default-login-page is configured as 'sso'. |
| Scope | Certain FortiGate firmware versions, including v7.2.12 and v7.4.x. |
| Solution | On the FortiGate, the defaulted-login-page can be set to sso to display the SSO login page instead of the default login page during administrator login attempts.
config system saml set status enable set default-login-page sso end
See Technical Tip: Admin login page being redirected to SSO instead of default for a sample configuration.
In affected firmware versions, the SAML redirect does not occur when a user directly browses to the 'https://<FortiGate_IP_or_FQDN>/login'. Instead, the FortiGate presents the regular admin login page, which may lead to unwanted administrator login attempts.
The issue is not reported in FortiOS v7.6.
Related article: Technical Tip: Configuring SAML SSO login for FortiGate administrators |