Skip to main content
ryld
ryld
New Member
July 16, 2025
Question

SSO authentication with SAML, Azure entra ID with FortiGate

  • July 16, 2025
  • 3 replies
  • 1200 views

I have done the configurations to SSO authenticate users with Microsoft Entra ID with Fortigate on SAML.
I tried the Fortinet documentation and all the configurations were done as same.


https://docs.fortinet.com/document/fortigate/7.6.3/administration-guide/33053/outbound-firewall-authentication-with-microsoft-entra-id-as-a-saml-idp


Once we attempt to authenticate, the user is taken to the authentication site (login.microsoft.com). After entering the user credentials, it will load for a long time without any response.

3 replies

funkylicious
SuperUser
funkylicious
SuperUser
July 16, 2025

hi,

try increasing the timer of the command below if not done already. ( def is 5s ) 

 

config system global
set remoteauthtimeout <1-300s>
end

"jack of all trades, master of none"
ryld
ryldAuthor
New Member
July 28, 2025

SSL VPN is working without any issues.
Now I need internet users to authenticate with SAML with Azure Entra ID.

smkml
Staff
smkml
Staff
July 17, 2025

Hi @ryld ,

 

Are you using IPsec VPN to connect? If yes, can you try to check the configuration parts, especially on phase1 interface "eap enable" .
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-Microsoft-Entra-ID-SAML/ta-p/307457

ryld
ryldAuthor
New Member
July 28, 2025

SSL VPN is working without any issues.
Now I need internet users to authenticate with SAML with Azure Entra ID.

Terms & ConditionsAccessibility statement