Troubleshooting Tip: Unable to log in to Fortianalyzer with SAML SSO

[Nur]

Description	This article describes how to resolve an issue where the customer is unable to log in to FortiAnalyzer using SAML SSO.
Scope	SAML SSO, Azure, and FortiAnalyzer.
Solution	The following error appears upon trying to access FortiAnalyzer with SAML SSO: To fix this: Step 1: Set the Relay State in Azure. Go to the Azure portal. In the SAML configuration for the FortiAnalyzer application, fill in the Relay State field with the following URL format: https://<IP address or FQDN>:<port number>/p/sso_sp/ Step 2: Adjust the Reply URL (if Step 1 did not work). Go back to the Azure portal’s SAML configuration. Ensure that the Reply URL matches the SP ACS (Login) URL for the FortiAnalyzer. Leave the Sign on URL field blank in the SAML configuration. Related article: Technical Tip: SAML SSO - FortiManager/FortiAnalyzer Troubleshooting Options.