Technical Tip: Getting the warning "Invalid Certificate detected, Are you sure you want to Continue?" while connecting SSL VPN Tunnel mode (FortiClient) with SAML authentication

[ssriswadpong]

Description	This article describes the warning "Invalid Certificate detected, Are you sure you want to Continue?" even you have changed the SSL VPN certificate or installed an SSL VPN server certificate on the client.
Scope	FortiGate 6.4 and 7.0 FortiClient 6.4 and 7.0
Solution	If you get the warning as per the above image after entering your credential, this is a warning from the Azure SAML part. If you are connecting SSL VPN by FQDN (fully qualified domain name), you have to change from public IP address to FQDN in 1. Under "config user saml" #config user saml #edit <name> #set entity-id "https://<FQDN>:<Custom SSL VPN port>/remote/saml/metadata" #set single-sign-on-url "https://<FQDN>:<Custom SSL VPN port>/remote/saml/login" #set single-logout-url "https://<FQDN>:<Custom SSL VPN port>/remote/saml/logout" #end 2. SAML attributes under Username Attributes & Claims in the Azure portal. Change from IP address to FQDN here.