Skip to main content
sjoshi
Staff
sjoshi
Staff
August 18, 2025

Technical Tip: Limitations of User-Level Policy Assignment in FortiSASE with RADIUS and SAML Authentication

  • August 18, 2025
  • 0 replies
  • 275 views
Description

 

This article describes the limitations of FortiSASE when using RADIUS or SAML authentication, where only user groups are visible in the portal. As a result, administrators cannot create user-specific profiles or firewall policies, unlike with LDAP authentication, which supports individual user visibility and control.

 

Scope

 

FortiSASE.

 

Solution

 

  • Requirement identified: ability to create individual users in FortiSASE, similar to LDAP users or local users, when using RADIUS or SAML authentication.
  • Current limitation: individual user creation is not supported with RADIUS or SAML; only group-based policies are possible.

 

Capture.PNG

 

  • Known constraint: LDAP authentication does not function with IPsec VPN, although it works with SSL VPN
  • Future consideration: LDAP support for IPsec VPN (IKEv2) may be introduced in a future release.
    Terms & ConditionsAccessibility statement