Wifi-Captive portal-SSO redirection

Hi all,

I built a captive portal at the fortiauthenticator and integrated it with MFA.
The saml process works well when tested separately in a browser but when the user connect to the SSID it’s not getting redirected properly, an error pops up says “pretty print”.

I have only basics in fortinet, can someone help ?

fortiauth in Azure , EntraId in Azure, fortigate onprem.

User(SSID)—-(AP)——-Fortigate ——-(IPsec)——Azure(Fortiauth+EntraID)