Technical Tip: Improve Smart Connect profile user experience

[kiri]

Description	This article describes how to improve user experience for users with Smart Connect profiles.
Scope	FortiGate, FortiAuthenticator.
Solution	When using Smart Connect profiles and a captive portal, the user experience may vary depending on the end device/platform. The user most likely has to manually navigate to the self-service portal for account management and Smart Connect profile downloading. To improve this and make it consistent across various end devices, a redirect after the captive portal (set security-external-web) can be used on the FortiGate interface or SSID where the captive portal is enabled. FortiAuthenticator, configure a self-service portal policy (shown in the first image below) with the same settings as the captive portal policy (shown in the second image below) across portal, realm, auth settings, group, etc. On the FortiGate, configure a redirect after the captive portal to the URL displayed during FortiAuthenticator policy self-service portal configuration. In the CLI: config system interface edit "port4" set vdom "root" set ip 10.25.25.1 255.255.255.0 set allowaccess ping https ssh snmp http set type physical set alias "port4-CAPTIVE PORTAL FAC" set security-mode captive-portal set security-external-web "https://fortiauth.local/portal/" set security-redirect-url "https://fortiauth.local/portal/selfservice/test/" set security-exempt-list "port4-exempt-list" set security-groups "guest-wifi-portal-user-group-FAC" set lldp-transmission enable set role lan set snmp-index 4 next end Now, all the users will be automatically redirected to the self-service portal after authentication. Related document: Smart connect profiles - FortiAuthenticator Administration Guide.