Troubleshooting Tip: Wrong username display wtih SAML SSO authentication

[mle2802]

Description	This article describes how to troubleshoot the issue with wrong username displayed on the FortiGate using SAML SSO for authentication. In this example, IPsec VPN is used with Azure SAML SSO.
Scope	FortiGate and Azure SAML SSO.
Solution	After a user successfully has logged in to the dial-up IPsec VPN using an SAML SSO, the member column may display 'userprincipalname' instead of the real username under IPsec VPN monitor. This is caused by the attribute 'username' on Azure being configured with wrong source attribute.  The correct source attribute in this scenario should be 'user.userprincipalname' instead of 'userprincipalname'. After changing it, the username is correctly displayed on FortiGate.