FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
Anonymous
Not applicable
Article Id 200137
Description This article describes how to reduce the generated IdP prefix to allow for more than 16 IdPs/Domains.
Scope FortiAuthenticator.
Solution

Steps to decrease the IdP prefix to increase the IdP/domain count:

  1. Add SP by going to Authentication -> SAML IdP -> Service Providers and selecting 'Create New'.

 

kb5.jpg

 

  1. Input all relevant information.

     

  2. For 'IdP Metadata', select the plus sign.

 

kb3.jpg

 

  1. Select 'Random' and a 16-character prefix is populated.

 

kb4.jpg

 

  1. Limit is 255 (alphanumeric (26 + 10)) characters. 

    As such, for 16 16-character prefix, it is possible to make 16 domains. Ensure all prefixes are unique.

     

  2. Decrease this to as low as 3 to be able to get the most out of the 255 limit. 2 or lower, and not so many unique combinations are getting.

     

 

This process is also applicable for manually creating the IdP prefix. Simply do not do step 4.  

Contributors