Can't Set xauthtype saml on FortiOS 7.4.7 for IPsec VPN

[nflnetwork29]

Hi all,

Trying to set up FortiClient IPsec VPN (IKEv2) with SAML (Microsoft Entra ID) on FortiOS 7.4.7. When I try set xauthtype saml or set saml-server, I get parse errors (code -61). Also getting psksecret required errors if I skip PSK.

Docs don’t mention any prerequisites. Has anyone gotten this working with Entra ID? Seems like the tunnel needs to be created in a specific order.

Thanks!

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

To configure a FortiClient IPsec VPN (IKEv2) with SAML (Microsoft Entra ID) on FortiOS 7.4.7, ensure that your Entra ID environment is set up, and follow the detailed configuration steps for SAML authentication. Check for syntax errors and ensure compatibility with FortiClient and FortiOS versions.

Hope it helps.

Regardsm