FortiClient VPN Save Login

[WorkWork]

AnyConnect allowed us to prepopulate the username field and still require the user to enter a password when they are ready to connect to VPN.

With FortiEMS, I found that if we enable the "Allow personal VPN" option, you then have the option to save login and provide a username to a new connection you setup in FortiClient. However, the connection we created in EMS will have everything grayed out and not allow to save the username.

I tried enabling the "Show VPN Before Login" and "Use Windows Credentials" option, but you are forced to either use VPN prior to login or not. If you choose not to, then it does not cache your credentials when you are ready to connect.

Hopefully that makes sense. Does anyone know if there is a way to prepopulate the username field or store it without the end user having to setup their own VPN connections?

[RobertReynolds · Accepted solution]

Not sure if this is relevant in recent firmware but may help?

http://kb.fortinet.com/kb/viewContent.do?externalId=FD36785&sliceId=1

[WorkWork]

Thank you for the reply Robert! I have seen those options available in EMS. The only problem with those options are that we don't want users storing their passwords for the VPN, just their username.

[mdurose]

Hi I am looking at the same issue right now in that the profiles pushed out via EMS do not allow the username to be cached/saved. Did you ever find a resolution?

Thanks, Mark

[WorkWork]

Hi! I never found a solution. Still requiring users to enter both username and password. We are testing the Windows 10 FortiClient app that you can get from the Microsoft store. Hoping that will have an option eventually. 

[AlastairHill]

I have also been looking at this as we need our employees to have their username save in the profiles pushed out via EMS,  the XML reference guide has the option  

https://docs.fortinet.com/document/forticlient/6.2.4/xml-reference-guide/858086/ssl-vpn

Changing <save_username> to 1

[ammayer]

My EMS XML config shows <save_username>1</save_username> yet still doesn't save username. Anyone able to get this going in the last 6 years?