Skip to main content
muhammadsaad
New Member
July 3, 2025
Solved

Fortigate SSL VPN SAML Authentication Error

  • July 3, 2025
  • 4 replies
  • 1847 views

Hi Team,

SAML authentication is not working. We have integrated Azure IdP with on-prem Active Directory and called the Azure IdP on the Fortigate Firewall. We are using SSL VPN and when we dial up the remote connection, its getting stuck at 40%. 

 

Can someone help out on this.

Thanks

Best answer by muhammadsaad

Team, the issue gets resolved after making some port changes and re-entering of entity id
Thanks for assistance.
Appreciated.

4 replies

kaman
Staff
Staff
July 3, 2025

Hi Muhammadsaad,

As you mentioned, VPN stuck at 40%. This may occur when FortiClient generates a new pop-up window verifying whether the user wishes to proceed with a non-trusted TLS/SSL certificate.

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Possible-reasons-for-FortiClient-SSL-VPN/ta-p/211965


Can you please run the below debug commands and try to connect the VPN and share us the output to check further

diagnose debug reset
diagnose debug console timestamp enable
diagnose debug application samld -1
diagnose debug application sslvpn -1
diagnose debug enable


Regards!

muhammadsaad
New Member
July 3, 2025

well due to some restrictions and secure environment, output can't be shared. Is there any other way

muhammadsaad
New Member
July 3, 2025

Run the diagnose commands and facing the below error:
Error: 'The identifier of a provider is unknown to #LassoServer'

We have also followed the required steps in order to overcome the error but no luck

muhammadsaad
muhammadsaadAuthorAnswer
New Member
July 7, 2025

Team, the issue gets resolved after making some port changes and re-entering of entity id
Thanks for assistance.
Appreciated.