Skip to main content
AndreF-Nel
AndreF-Nel
New Member
February 12, 2023
Solved

FortiAuthenticator do not advertise Azure SAML Groups for importing users

  • February 12, 2023
  • 4 replies
  • 3057 views

Hi All, I configured FortiAuthenticator with integration to Azure, created the Enterprise Application and App Registration on Azure. I require to import / sync only specific group members into FortiAuthenticator as remote users and add them to identified remote SAML Group for specific authentication and autheorization managed by FAC. Unfortunately I do not get a list of groups from Azure and sync imports all users from Azure. We have approximately 9000 groups and around 11000 users in Azure and I do not require all in the FAC group.

Currently open TAC with Microsoft and Fortinet. MS propose SCIM to manage provisioning of users and group but FAC do not have SCIM.

Anyone have a similar issue and how did you resolve?

Kind Regards

Andre F

Best answer by rbraha

Hi @AndreF-Nel 

 

On newer version of FAC 6.6.0 it is added as new feature that FAC now support SCIM client service.

 

https://docs.fortinet.com/document/fortiauthenticator/6.6.0/release-notes/568509/whats-new#What's_new

4 replies

Anthony_E
Staff
Anthony_E
Staff
February 15, 2023

Hello Andre,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
lmarinovic
Staff
lmarinovic
Staff
February 15, 2023

When you want to import the users FAC should give you the list of groups for importing the users:

In this link at the end of document you can find that info:

 

Group Select the SAML server group to import users from.

https://docs.fortinet.com/document/fortiauthenticator/6.5.0/administration-guide/441267/remote-users

 

Does the groups timeout when you want to list? Does FAC have enough rights to read the Azure?

 

I think on this document is stated what is needed:

https://docs.fortinet.com/document/fortiauthenticator/6.4.0/cookbook/361286/configuring-azure

 

Best regards,

 

Lazar

 

 

 

    AndreF-Nel
    AndreF-NelAuthor
    New Member
    December 20, 2023

    New version of FortiAuthenticator 6.5.2 included page listing of Azure groups

      rbraha
      Staff
      rbrahaAnswer
      Staff
      December 21, 2023

      Hi @AndreF-Nel 

       

      On newer version of FAC 6.6.0 it is added as new feature that FAC now support SCIM client service.

       

      https://docs.fortinet.com/document/fortiauthenticator/6.6.0/release-notes/568509/whats-new#What's_new

      Terms & ConditionsAccessibility statement
      Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
      Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.