| Description | This article describes the importance of using a metadata file when configuring SAML on FortiAuthenticator. |
| Scope | FortiAuthenticator SAML. |
| Solution |
There are cases where FortiAuthenticator acts as IDP ( Identity provider) or SP (Service provider). When configuring either of these it is required to configure external SP or IDP details on FortiAuthenticator. The most common method of doing this is through copy and paste. But by doing so there can be cases certain mismatches will take place. It can be a minor error, but SAML will not work as expected, causing errors. There are cases where external entities might have differences in the exact URLS, certificates and etc.
It is recommended to use the metadata file provided by the relevant SP or IDP to upload external IDP or SP details to FortiAuthenticator.
This will minimize configuration issues in SAML in FortiAuthenticator.
Below are two screenshots from FortiAuthenticator for SP and IDP:
|
