Create SAML IDP problem

Dear All, 

          i was trying to configuring SAML SSO login for ssl vpn with azure ad, i followed below command in fortigate and when i type next, it popup entity-id is empty, and i also have below question in green, any help would be appreicated 

1. Create SAML IDP:
   CLI command:
   conf user saml
       edit “azure-name”
   set cert "SSL-VPN settings assigned Server Certificate"  <-- any ssl cert in fortigate will do ?
     set entity-id "https://<FortiGate IP address or FQDN>:<Custom SSL VPN port>/remote/saml/metadata"
           set single-sign-on-url "https://<FortiGate IP address or FQDN>:<Custom SSL VPN port>/remote/saml/login"
           set single-logout-url "https://<FortiGate IP address or FQDN>:<Custom SSL VPN port>/remote/saml/logout"
           set idp-entity-id "<Azure AD identifier>"  <-- Identifier (Entity ID) from Basic SAML Configuration ?
    
           set idp-single-sign-on-url "<Login URL>"
           set idp-single-logout-url "<Logout URL>"
           set idp-cert "<Certificate imported earlier>"
           set user-name "username"
           set group-name "group"
       next
   end

FortiGate-100F (Azure-name) # next
node_check_object fail! for entity-id is empty.
Attribute 'entity-id' MUST be set.
Command fail. Return code 1

piaakit