Skip to main content
gettyu
New Member
October 22, 2024
Question

Is there another IPsec VPN Client apart from FortiClient that supports SAML/SSO?

  • October 22, 2024
  • 3 replies
  • 3120 views

I'm in the lookout for a new VPN Client as FortiClient has been a pain in the behinds. Especially as some core features are behind a paywall...

I'm currently seeking alternatives that support SSO. Unfortunately i'm not aware of any.

Is there any client VPN you guys use that is much better than FortiClient and support SSO?

3 replies

johnathan
Staff
Staff
October 24, 2024

The way that the FortiGate does SAML is kinda proprietary, there wouldn't be a drop in replacement.
You can try this 3rd party replacement for FortiClient, but it only does SSLVPN and not IPsec: https://github.com/adrienverge/openfortivpn

Never trust a computer you can't throw out a window.
pminarik
Staff
Staff
October 24, 2024

A standard for doing SAML with IPsec doesn't exists, so all solutions will necessarily be custom/proprietary.

 

The Forti-solution is surprisingly "normal" in that it doesn't really implement any completely new protocols for this, it just stitches standard stuff into a custom flow of events (I don't know how much I can reveal about it, but a dedicated curious person with a FortiGate and FortiClient should be able figure this out).

anarine
Visitor III
October 24, 2024

I use the free forticlient vpn and it works with saml/sso