Skip to main content
pekhaqun
pekhaqun
New Member
September 12, 2022
Question

FortiAuthenticator 6.4.5, captive portal?

  • September 12, 2022
  • 4 replies
  • 3190 views

So, here in reseller land, I'm setting up a lab to prove whether something will work before we sell it. It involves using the social login features of FAC, along with a captive portal and wifi via FortiAPs, all that good stuff, for a customer that wants their guest wifi to have that function.

I've fallen over at trying to set up a captive portal that will actually use the social login features- mostly because on the Authentication > Portals > Policies page, I'm expecting to see a "Captive Portal/ Self-service portal" toggle up at the top right, and it's... not there. I've found a pic of it in the docs, but on my lab instance, well, there it isn't.

I've had a good look round the FAC settings, the self service portal itself is online, but the registration page only allows the local user registration, not a social connection.

Has anyone else seen this, or have any ideas please?

    4 replies

    gfleming
    Staff
    gfleming
    Staff
    September 12, 2022

    You'll need to do a few things first. Depending on the social service you are using, you'll need to add it as an OAUTH server. 

     

    https://docs.fortinet.com/document/fortiauthenticator/6.4.5/administration-guide/176883/oauth

     

    Next you'll need to create a Captive Portal Policy enabling Social Users under the "Authentication Type" and under Identity Sources select the OAUTH server under the appropriate social service(s).

     

    https://docs.fortinet.com/document/fortiauthenticator/6.4.5/administration-guide/538900/captive-portal-policies

    Brunn3r
    Brunn3r
    Explorer II
    September 15, 2022

    I have exactly the same issue here,

     

    FortiAuthenticator in a LAB environment to test the Captive Portal functionality. But I don't see the toggle option under  Authentication > Portals > Policies

     

    I also asked for an Eval license in case something is only available when licensed, but still there is no toggle button.

    I try to follow this Cookbook entry: https://docs.fortinet.com/document/fortiauthenticator/6.4.0/cookbook/578250/fortiauthenticator-as-a-wireless-guest-portal-for-fortigate

    Brunn3r
    Brunn3r
    Explorer II
    September 15, 2022

    I now did a downgrade to 6.4.4 and it seems like i can switch there between captive portal and self service under Policies. And this directly from scratch without any configuration (was definitively missing before), so looks like a bug in 6.4.5

    gfleming
    Staff
    gfleming
    Staff
    September 15, 2022

    Interesting. My FAC VM is running 6.4.5 and I have the toggle. Have you tried different browsers?

    gfleming
    Staff
    gfleming
    Staff
    September 16, 2022

    OK I found the issue. If you look at the release notes for 6.4.5 there's a note that says the captive portals have to be accessed  manually using this URL: https://[FAC-IP]/admin/guest/captiveportalpolicy/

     

    https://docs.fortinet.com/document/fortiauthenticator/6.4.5/release-notes/564992/special-notices#Accessing_the_Captive_portals_page

      Terms & ConditionsAccessibility statement