Wireless Captive Portal Authentication using SAML Credentials and Azure as IdP

Forum|Forum|3 years ago
October 20, 2022
3 replies
1713 views

Hi evrybody,

i am trying to configure wifi access with saml AZURE following this guide https://community.fortinet.com/t5/FortiGate/Technical-Tip-Wireless-Authentication-using-SAML-Credentials-and/ta-p/223422,

in essence I have configured a fqdn instead of the ip of the ssid which is resolved internally by the fortigate DNS, the certificate is a wildcard signed by a CA. What happens is that when I try to connect to the SSID I am redirected correctly to the fqdn I have configured. but I get a certificate error as it does not match the CN of the FQDN but looks like Fortinet. Do you know how I can change the certificate presented to me?

Thanks in advice.

kiri

Staff & Editor

Hi angelop91,
Did you upload the wildcard cert to the firewall and configure it?
You can set the cert in 2 sections.

config system global
set admin-server-cert

and/or

config user setting
set auth-cert

Make sure the wildcard is set in both.
If you can't set it in config user setting, then it's not available on your FOS version.
config system global only should do in that case.

Let me know if this helps.

angelop91Author

New Member

Hi @@kiri

yes, wildcard cert are set on both side u advice, but again the captive portal web page certificate continue to present with Fortinet certificate instead of wildcard.