Troubleshooting Tip: SAML SSO VPN does not stay si...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 277235

Description

This article describes how to troubleshoot SAML SSO VPN that does not stay signed in.

Scope

FortiGate, FortiClient.

Solution

When logging into a VPN using SAML SSO, when users choose yes to 'Stay signed in' it is still necessary to re-input the credentials every time they disconnect and reconnect.

To address this issue, enable/check the option 'Do not modify internal browser cookies' under FortiClient -> Settings -> VPN Options. After that, re-login again with 'stay signed in' enabled.

fct_dont-modify-internal-browser-cookies (1).png

Note:

If the above option is greyed out, the user needs to remove the 'lock' from the FortiClient and this option can be enabled:

3130

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Troubleshooting Tip: SAML SSO VPN does not stay signed in

You are leaving our website