Skip to main content
AEK
SuperUser
SuperUser
August 16, 2026
Question

FortiWeb SAML debug

  • August 16, 2026
  • 4 replies
  • 58 views

Hi FWB admins

FortiWeb 8.0.6, I set it up as SP.

When I try run SAML debug as documented in admin guide and perform SAML authentication, I get redirection to SP but I get nothing in debug output.

diagnose debug application samld -1  (or 7)

diagnose debug enable

<output empty>

Is there something else to enable in order to make SAML debug work? Any help would be appreciated.

4 replies

sjoshi
Staff
Staff
August 16, 2026

Hi ​@AEK 

 

That should be the correct debug

Reference:

https://docs.fortinet.com/document/fortiweb/8.0.0/administration-guide/163224/saml-sso-login-issues

 

Is it possible to restart samld daemon on the FWB, please do it in maintenance window

you can refer below article:

 

Thanks, Salon
AEK
SuperUser
AEKAuthor
SuperUser
August 16, 2026

Hi Sjoshi

Unfortunately the mentioned debug command doesn’t give any output, whether the authentication succeeds or not, it doesn’t give any output.

I tried version 7.4.11 and 8.0.6 but the result is the same.

I start to think that the command simply doesn’t work, or probably I didn’t use it correctly, however I used it exactly as mentioned on the shared docs.

AEK
sjoshi
Staff
Staff
August 17, 2026

command is correct

worth trying to restart the daemon while running the debug if it shows any output

Thanks, Salon
AEK
SuperUser
AEKAuthor
SuperUser
August 18, 2026

Hello Joshi

Thanks for your feedback.

On the first CLI I did this:

WAF02 # diagnose debug application samld 7

WAF02 # diagnose debug enable 

WAF02 # 

 

And on the other CLI:

WAF02 # diagnose system ps | grep saml

 3353 root     92104 S    /bin/samld

 6423 root      2920 S    /bin/cli_grep saml

WAF02 # diagnose system kill 9 3353

WAF02 # diagnose system ps | grep saml

 6483 root     92104 S    /bin/samld

 6487 root      2920 S    /bin/cli_grep saml

 

But nothing happened on the first CLI.

For info I restarted FWB but same result, and I tested diag debug on WebUI’s CLI and from ssh as well but same result.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!