Skip to main content
amrut627
New Member
January 26, 2025
Question

Fortios 7.4.7 Break MS Entra 2fa

  • January 26, 2025
  • 1 reply
  • 2228 views

Hi,
This morning i get complained from my users they cannot connect the VPN client. This weekend The FW installed automatically (never turned on auto install) the latest 7.4.X firmware which is 7.4.7.
My FW configured with Entra enterprise app to use the 2fa.
The users got stuck at Forticlient 48% with error stating there is an error in password or permissions -7200.
Reverting back to the 7.4.6 fixed the issue for now https://100001.onl/ .
Also oddly enough the connection was "connected at the FW , but disconnected at the Forticlient. There was an error under username in the FW: Two-Factor Authentication is not enabled.
Anyone else see this?

1 reply

Dhruvin_patel
Staff
Staff
January 26, 2025

Greetings!

 

It seems like the issue you encountered with FortiClient connectivity at 48% after upgrading to FortiOS 7.4.7.

 

I found some references with similar issues after the upgrade, 

 

https://www.reddit.com/r/fortinet/comments/1i5u7bw/7017_fortios_breaks_sslvpn_using_saml_to_entra/

 

Using an external browser in FCT VPN config as https://community.fortinet.com/t5/Support-Forum/7-0-17-breaking-SAML/m-p/371377#M261500 fixes the issue.

 

Best Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.