Fortigate and Okta authentication integration

Hi all,

Previously I have implemented Fortigate integrate with Okta authen. but now we still having some issues which is I am not really sure about it.

Here is the config that I implemented in Fortigate

config user saml     edit "okta-idp"         set cert "Fortinet_Factory"         set entity-id "https://xxx.xxxx.xxx.xx:10443/remote/saml/metadata/"         set single-sign-on-url "https://xxx.xxxx.xxx.xx:10443/remote/saml/login/"         set single-logout-url "https://xxx.xxxx.xxx.xx:10443/remote/saml/logout/"         set idp-entity-id "http://www.okta.com/exxxxxxxxxxxxxxxxxxxxx"         set idp-single-sign-on-url "https://xxxxx-url.apac.xxxx.com/app/apac-xxxxx/xxxxxxxxxxxxxxxxx/sso/saml"         set idp-cert "REMOTE_Cert_1"         set user-name "username"         set digest-method sha256     next end   xxxxxfw01 (corporate-saml) # show config user group     edit "corporate-saml"         set member "okta-idp"         config match             edit 1                 set server-name "okta-idp"                 set group-name "corporate-saml"             next         end     next end

Firewall policy:

Debug output:

samld_send_common_reply [122]:     Attr: 17, 27, magic=178af1777bb9xxxx [336:vdom_xxxx:c117]fsv_saml_login_response:510 No group info in SAML response. [336:vdom_xxxx:c117]fsv_saml_login_response:514 No user name info in SAML response. Please check saml configuration. [336:vdom_xxxx:c117]fsv_saml_login_resp_cb:163 SAML response error: 3. [336:vdom_xxxx:c117]req: /remote/saml/login/(null) [336:vdom_xxxx:c117]def: (nil) /remote/saml/login/(null) [336:vdom_xxxx:c117]sslvpn_read_request_common,686, ret=-1 error=-1, sconn=0x7f0cf2a0af00. [336:vdom_xxxx:c117]Destroy sconn 0x7f0cf2a0af00, connSize=0. (vdom_xxxx)

Please let me know how to troubleshoot on this issue.

Thanks,