FortiAuthenticator 6.4.5, captive portal?

[pekhaqun]

So, here in reseller land, I'm setting up a lab to prove whether something will work before we sell it. It involves using the social login features of FAC, along with a captive portal and wifi via FortiAPs, all that good stuff, for a customer that wants their guest wifi to have that function.

I've fallen over at trying to set up a captive portal that will actually use the social login features- mostly because on the Authentication > Portals > Policies page, I'm expecting to see a "Captive Portal/ Self-service portal" toggle up at the top right, and it's... not there. I've found a pic of it in the docs, but on my lab instance, well, there it isn't.

I've had a good look round the FAC settings, the self service portal itself is online, but the registration page only allows the local user registration, not a social connection.

Has anyone else seen this, or have any ideas please?

[gfleming]

You'll need to do a few things first. Depending on the social service you are using, you'll need to add it as an OAUTH server. 

https://docs.fortinet.com/document/fortiauthenticator/6.4.5/administration-guide/176883/oauth

Next you'll need to create a Captive Portal Policy enabling Social Users under the "Authentication Type" and under Identity Sources select the OAUTH server under the appropriate social service(s).

https://docs.fortinet.com/document/fortiauthenticator/6.4.5/administration-guide/538900/captive-port...

[Brunn3r]

I have exactly the same issue here,

FortiAuthenticator in a LAB environment to test the Captive Portal functionality. But I don't see the toggle option under  Authentication > Portals > Policies

I also asked for an Eval license in case something is only available when licensed, but still there is no toggle button.

I try to follow this Cookbook entry: https://docs.fortinet.com/document/fortiauthenticator/6.4.0/cookbook/578250/fortiauthenticator-as-a-...

[Brunn3r]

I now did a downgrade to 6.4.4 and it seems like i can switch there between captive portal and self service under Policies. And this directly from scratch without any configuration (was definitively missing before), so looks like a bug in 6.4.5

[gfleming]

Interesting. My FAC VM is running 6.4.5 and I have the toggle. Have you tried different browsers?

[gfleming]

Oops i was on the wrong instance running 6.4.1. Sure enough my 6.4.5 instance is missing the toggle. I found this info in the release notes for 6.4.5, however. You need to access the captive portals page using a manual URL:

OK I found the issue. If you look at the release notes for 6.4.5 there's a note that says the captive portals have to be accessed  manually using this URL: https://[FAC-IP]/admin/guest/captiveportalpolicy/

https://docs.fortinet.com/document/fortiauthenticator/6.4.5/release-notes/564992/special-notices#Acc...

[gfleming]

OK I found the issue. If you look at the release notes for 6.4.5 there's a note that says the captive portals have to be accessed  manually using this URL: https://[FAC-IP]/admin/guest/captiveportalpolicy/

https://docs.fortinet.com/document/fortiauthenticator/6.4.5/release-notes/564992/special-notices#Acc...