Forticlient vpn on mobile fails to connect SAML if MFA is enabled

Forum|Forum|1 year ago
October 24, 2024
4 replies
2831 views

I use the free forticlient vpn on android phone and saml/sso authentication with azure user works fine.

However if the user has MFA, and after I enter the user's MFA code on the screen, the connection drops. Seems to be an issue with the mobile android client ?

If I enter the code on a Separate device, the connection succeeds. I have tried to set the app to "always on top" but issue persists.

FortiClient

spoojary

Staff

Try and increase the global remote auth timeout to 300

https://docs.fortinet.com/document/fortiauthenticator/6.5.0/cookbook/306162/increasing-remote-authentication-timeout-using-fortigate-cli

Sgagan

Staff

Hello,

Could you also mention the FortClient version that you are using on the affected android device?

arahman

Staff

Hi, can you please also share the screen shot of the error you are seeing, also here is an article worth checking

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Android-device-SSL-VPN-Connection-Failed/ta-p/242594

anarineAuthor

Visitor III

Yes the global remoteauthtimeout setting is set to 300.

Everything works fine on fortivpn client on my windows pc.

On Android phone forticlient 7.4.0.0171-

SSLVPN saml MFA works fine. But IKE2 saml MFA fails whenever the code is entered on the Same android phone client. There is No error message. It's like the forticlient forgets it needs to connect after successful authentication.

Sign up

Login with SSO

Login to the community

Login with SSO