Skip to main content
suryana
suryana
New Member
October 5, 2025
Question

The SSL VPN using Microsoft MFA is stuck at 40% after upgrading to firmware version 7.4.9

  • October 5, 2025
  • 2 replies
  • 3821 views

After upgrading FortiGate 101F to firmware 7.4.9, SSL VPN authentication via Azure AD SAML (Microsoft MFA) stops at 40%.

2 replies

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
October 5, 2025

Did you see the discussion below? The same change is in 7.4.9 as mentioned in the FTNT KB referred in the thread.
https://community.fortinet.com/t5/Support-Forum/SSL-VPN-Doesn-t-work-after-firmware-update-7-2-12/m-p/413283#M277184

Toshi

hpenmetsa
Staff
hpenmetsa
Staff
October 6, 2025

Hi @suryana 

From FortiOS v7.4.9, FortiGate verifies the signature of the SAML Response message. Please check the document below and follow the steps as mentioned.

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SAML-Authentication-fails-after-firmware/ta-p/407859


Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!