Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

PatrWeic
New Contributor

FortiWeb: no SSO with Forms based? Why not?

Hi,

We need to use FortiWeb in front of a lot of applications and many have still Formbased authentication and we would like to front-end them with site publish and do SSO Forms based.

Coming from other vendors this seemed like an easy thing. And also using it on SSLVPN Fortigate but it does not exist with Fortiweb? Also the same is true for FortiADC?

Tested on 6.2 and 5.3

------------------------------
Thx
------------------------------
Thx
Thx
1 Solution
Rafael_LEHMANI_FTNT

Hi Patrick,

FWB Site Publishing supports SSO with HTML Form Based authentication.

Best Regards

Rafael Lehmani

Consulting Systems Engineer,??Enhanced Technologies, INTL
________________________________________________




*** Please note that this message and any attachments may contain confidential and proprietary material and information and are intended only for the use of the intended recipient(s). If you are not the intended recipient, you are hereby notified that any review, use, disclosure, dissemination, distribution or copying of this message and any attachments is strictly prohibited. If you have received this email in error, please immediately notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed. Please also note that any views, opinions, conclusions or commitments expressed in this message are those of the individual sender and do not necessarily reflect the views of Fortinet, Inc., its affiliates, and emails are not binding on Fortinet and only a writing manually signed by Fortinet's General Counsel can be a binding commitment of Fortinet to Fortinet's customers or partners. Thank you. ***



------Original Message------

Hi,

We need to use FortiWeb in front of a lot of applications and many have still Formbased authentication and we would like to front-end them with site publish and do SSO Forms based.

Coming from other vendors this seemed like an easy thing. And also using it on SSLVPN Fortigate but it does not exist with Fortiweb? Also the same is true for FortiADC?

Tested on 6.2 and 5.3

------------------------------
Thx
------------------------------
Rafael LEHMANI

View solution in original post

4 REPLIES 4
Rafael_LEHMANI_FTNT

Hi Patrick,

FWB Site Publishing supports SSO with HTML Form Based authentication.

Best Regards

Rafael Lehmani

Consulting Systems Engineer,??Enhanced Technologies, INTL
________________________________________________




*** Please note that this message and any attachments may contain confidential and proprietary material and information and are intended only for the use of the intended recipient(s). If you are not the intended recipient, you are hereby notified that any review, use, disclosure, dissemination, distribution or copying of this message and any attachments is strictly prohibited. If you have received this email in error, please immediately notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed. Please also note that any views, opinions, conclusions or commitments expressed in this message are those of the individual sender and do not necessarily reflect the views of Fortinet, Inc., its affiliates, and emails are not binding on Fortinet and only a writing manually signed by Fortinet's General Counsel can be a binding commitment of Fortinet to Fortinet's customers or partners. Thank you. ***



------Original Message------

Hi,

We need to use FortiWeb in front of a lot of applications and many have still Formbased authentication and we would like to front-end them with site publish and do SSO Forms based.

Coming from other vendors this seemed like an easy thing. And also using it on SSLVPN Fortigate but it does not exist with Fortiweb? Also the same is true for FortiADC?

Tested on 6.2 and 5.3

------------------------------
Thx
------------------------------
Rafael LEHMANI
PatrWeic

Dear Rafael,

I have not seen in the admin guide nor anywhere that it works.

How can I configure it to work?

Is it documented somewhere?

------------------------------
Thx
------------------------------
Thx
Thx
PatrWeic

Dear Raphael,

What I mean is like it is described in the OWA Deployment Guide from 2014.

Site publishing does Form Based, but the backend SSO is only Basic and you need to switch Owa to use basic auth.

I have not found anything that says how to use SSO Formbased with owa on the backend. 


------------------------------
Thx
------------------------------
Thx
Thx
Rafael_LEHMANI_FTNT

Hi Parick,

We do not support HTML Form Based delegation.

Please open a Knock ticket so we can re-open NFR380101.

Best Regards

Rafael Lehmani

Consulting Systems Engineer,??Enhanced Technologies, INTL
________________________________________________




*** Please note that this message and any attachments may contain confidential and proprietary material and information and are intended only for the use of the intended recipient(s). If you are not the intended recipient, you are hereby notified that any review, use, disclosure, dissemination, distribution or copying of this message and any attachments is strictly prohibited. If you have received this email in error, please immediately notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed. Please also note that any views, opinions, conclusions or commitments expressed in this message are those of the individual sender and do not necessarily reflect the views of Fortinet, Inc., its affiliates, and emails are not binding on Fortinet and only a writing manually signed by Fortinet's General Counsel can be a binding commitment of Fortinet to Fortinet's customers or partners. Thank you. ***



------Original Message------

Dear Raphael,

What I mean is like it is described in the OWA Deployment Guide from 2014.

Site publishing does Form Based, but the backend SSO is only Basic and you need to switch Owa to use basic auth.

I have not found anything that says how to use SSO Formbased with owa on the backend. 


------------------------------
Thx
------------------------------
Rafael LEHMANI