Can't Set xauthtype saml on FortiOS 7.4.7 for IPsec VPN

Forum|Forum|1 year ago
May 22, 2025
2 replies
793 views

Hi all,

Trying to set up FortiClient IPsec VPN (IKEv2) with SAML (Microsoft Entra ID) on FortiOS 7.4.7. When I try set xauthtype saml or set saml-server, I get parse errors (code -61). Also getting psksecret required errors if I skip PSK.

Docs don’t mention any prerequisites. Has anyone gotten this working with Entra ID? Seems like the tunnel needs to be created in a specific order.

Thanks!

saml

Anthony_E

Staff

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Best Regards

Anthony_E

Staff

Hello,

To configure a FortiClient IPsec VPN (IKEv2) with SAML (Microsoft Entra ID) on FortiOS 7.4.7, ensure that your Entra ID environment is set up, and follow the detailed configuration steps for SAML authentication. Check for syntax errors and ensure compatibility with FortiClient and FortiOS versions.

Hope it helps.

Regardsm

Best Regards

Sign up

Login with SSO

Login to the community

Login with SSO