Captive portal redirection SAML

Forum|Forum|2 years ago
December 12, 2023
7 replies
4185 views

Hi All,

We've successfully setup captive portal using Azure as IDP

The problem is that the redirection is to the default fgtauth page and must click on "log in using SAML Identity Provider" to sign-in with Azure account.

Which is the way to be redirected to the saml portal?

Thanks!

FortiGate

rbraha

Staff

Hi @BuHeTy

Are you using webmode or you have Forticlient installed there , through webmode you will need to select with the option Single -Sign -On ,when using FortiClient you can enable the option " Enable Single Sign On (SSO) for VPN Tunnel and also Enable auto-login with Azure Active Directory .

BuHeTyAuthor

Visitor III

Hi,

We don't use Forticlient for our host in the network.

The captive portal is policy based, not interface.Till now we've used it with radius and/or FSSO collector pulling users from our active directory MS servers.

Azure implementation works fine. Only the redirected page is the problem.

Debbie_FTNT

Staff & Editor

Hey,

usually you get the option screen (put in credentials OR click "Log in using SAML Identity Provider") if there are multiple possibilities how the user could be authenticated. If you have more than one group (one SAML, one LDAP for example) in that policy triggering the captive portal, FortiGate can't tell if the authentication should go to SAML or somewhere else, and thus offers the option to input credentials or go to SAML server.

You would have to remove any non-SAML group from the policy to ensure FortiGate redirects to SAML server immediately.

BuHeTyAuthor

Visitor III

Hi @Debbie_FTNT ,

I've read this in HOW-tos and in the policy there are no other than Azure groups.

BuHeTyAuthor

Visitor III

Nope,

Still redirects to th fgauth page. It FortiAnalyser traffic matches the policy with deny action. When I authenticate it is then allowed and authentication server is the Azure configured.

Sign up

Login with SSO

Login to the community

Login with SSO