Skip to main content
warshad
Staff
Staff
December 22, 2021

Technical Tip: Disabling auto caching on VPN login using SAML

Description This article describes an issue with FortiClient version 7.0 where the user logins are saved and are directly signed in without any Multi-Factor Authentication prompt.
Scope FortiClient 7.0.
Solution

FortiClient stores the data in either of the following directories:

 

<Drive>:\Users\UserName\AppData\Local\FortiClient

 

<Drive>:\Users\%username%\AppData\Roaming\FortiClient\Network\*.*/q


There is a file in there called 'cookies' which, if deleted, will cause FortiClient to once again prompt for authentication.

 

To clear cookies from the FortiClient GUI itself:

 

cookies.PNG

 

Note: If the 'Clear Cookies' option does not work as expected, delete the existing IPsec or SSL VPN and re-create a new one, especially if it is related to any certificate error.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT