IPsec SAML Server

2 replies
43 views

If we refer to the Fortinet article below:

Technical Tip: Implementing IPsec VPN SAML-based authentication using loopback Interface | Community

it states that:

IKE with SAML authentication does not support multiple SAML servers on the same interface, as the SAML server is directly bound to the interface and allows only one instance to be configured.

What is the recommended design if I have two Internet connections for VPN redundancy?

Since the SAML server is bound to an interface, does that mean we cannot enable the same SAML server on the secondary Internet interface?

Has anyone implemented IPsec VPN with SAML authentication in a dual-ISP redundant setup?

Jean-Philippe_P

Staff & Editor

Hello HS08,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

Jean-Philippe - Fortinet Community Team

funkylicious

SuperUser

you can bind the same SAML server to another interface.

you cannot have multiple different SAML servers bound to the same interface, 1 unique saml server per interface

"jack of all trades, master of none"

Sign up

Login with SSO

Login to the community

Login with SSO