Forticloud SSO Sign-In 403 Forbidden

[techstaff]

Lately when trying to login to Fortigates using the Forticloud SSO, I've been getting 

403 Forbidden

You are not allowed to access this resource.

I searched a number of resources to see what I may have missed but nothing shows up. The only steps I can see to try to resolve it, I have turned the Forticloud SSO of and back on. Is this another 'paid' feature now with the recent changes?

[kiri]

Hi techstaff,
Is your issue resolved now by toggling sso?

[techstaff]

No.

[kiri]

OK. Most of the times 403 is due to incorrect/mismatching config like: saml service disabled on the service interface, incorrect/missing certs, sp single-sign-on-url has a / appended and so on.

Please review your config.

Is your sp a fortigate?

Did you follow any guides to configure this?

[techstaff]

Configure what? This is the Sign in with Forticloud option at the login screen.

[kiri]

Hi techstaff,
I misread your opening message.
I thought you're dealing with Fortiauthenticator Cloud (FortiTrust Identity) SSO. I would open a customer support request to look into that.