FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to fix login issues with third parties such as OKTA when using SAML.
Scope
FortiGate v6.4, v7.0, 7.2 and v7.4.
Solution
A user might experience a SAML login issue with third parties such as OKTA. Using the below SAML debug it is possible to find the following error:
diag debug application saml -1
samld_send_common_reply [122]: Attr: 22, 32, Failed to verify signature.
The Signature verification failure relates to the certificate provided by the IDP (eg. OKTA) that needed to be uploaded to the certificate on the FortiGate and used in the SAML configuration as below.
