FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
dbhavsar
Staff
Staff
Article Id 322384
Description This article describes how the login page is being redirected to SSO even though it is not set up.
Scope FortiGate.
Solution

The first thing necessary to check is the SAML settings on the FortiGate:


config system saml
    set status enable

    set default-login-page sso  <--
    set default-profile "super_admin"
    set idp-entity-id "https://custom1.fortigate.com/saml2/saml2/JumpCloudlab"
    set idp-single-sign-on-url "https://custom1.fortigate.com/saml2/saml2"
    set idp-single-logout-url "https://custom1.fortigate.com/userconsole"
    set idp-cert "REMOTE_Cert_4"
    set server-address "1.1.1.1"
end

 

In the above settings, it is possible to see that the default-login-page is set to SSO, which redirects to SSO instead of the default page. It is necessary to change the settings below:


    set default-login-page normal

 

Once the changes are made try to log in again and it will not redirect to the SAML login.

 

To configure the SSO login, check more via this KB article: Technical Tip: Configuring SAML SSO login for FortiGate administrators with Entra ID acting as SAML...