Skip to main content
LouisG
New Member
October 20, 2023
Question

Captive portal / Authentification tab not closing automatically on Chrome & Brave

  • October 20, 2023
  • 2 replies
  • 2040 views

Hello everyone,

 

We are currently experimenting outbound firewall authentication with Azure AD as a SAML IdP. Here is the cookbook :

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/33053/outbound-firewall-authentication-with-azure-ad-as-a-saml-idp 

 

Everything is working fine but we have strange issue with Google Chrome and Brave. After the user athentication, the user get stuck on this page and he's not redirected to the original request / URL like it did on Firefox and Edge for example.

 

Chrome :

chrome.jpg

 

Brave :

brave.jpg

 

 

As you can see, the user get stuck on the exact same URL, blank page and the TAB is not closing : https://login.microsoftonline.com/common/SAS/ProcessAuth

 

For us it's not a big deal, you close this TAB and firewall rules are well applies based on your Azure AD dynamic(s) group(s). But, we already know that it will be a big issue for our users...

 

We have check multiple settings but everything seems fine... Am I missing something or it's a bug comming from Chrome and Brave ?

 

Regards,

Louis

2 replies

rbraha
Staff
Staff
October 21, 2023

Hi @LouisG 

 

You can run the below debug command on FGT CLI and SAML tracer on chrome ,to get more info about the redirection on Saml authentication debugs.

diag debug console timestamp enable

diag debug app samld -1

diag debug enable

FGAuc
New Member
May 27, 2024

@LouisG 

 

Have you found a solution or any clues? I have the same issue on Forti OS 7.2.8 but it seems to happend on any browser(Edge share the same behavior). Been trying to dig around for more information but there is only your post that pop on search engine.

 

I also tried to do some SAML debugging, but the transactions does not give any error nor seems abnormal.

 

Thanks

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!