FortiClient Error 7200 for SAML while WebVPN works fine

[Stephen3]

I had SAML to Microsoft Entra ID working fine for a little bit here, but then FortiClient started showing "Credential or SSLVPN configuration is wrong. (-7200)" on every connection attempt.

SAML works just fine when connecting to the same system over WebVPN, so this does not appear to be an issue with the SAML config.

Any suggestions for getting FortiClient to work again?

[hbac]

Hi @Stephen3,

What is the FortiClient version? Have you tested with different computers? 

Regards, 

[Stephen3]

I'm using FortiClient 7.2.2.0864 at the moment.

I haven't tried with multiple computers, but again, SAML works fine on this same computer for Web VPN, it is only FortiClient that is not cooperating.

I rebooted and FortiClient worked for a couple of connections again before it stopped working again.  It seems that if I connect to a couple of FortiGates using the same SAML account that FortiClient caches something incorrectly.