Fortios 7.4.7 Break MS Entra 2fa

[amrut627]

Hi,
This morning i get complained from my users they cannot connect the VPN client. This weekend The FW installed automatically (never turned on auto install) the latest 7.4.X firmware which is 7.4.7.
My FW configured with Entra enterprise app to use the 2fa.
The users got stuck at Forticlient 48% with error stating there is an error in password or permissions -7200.
Reverting back to the 7.4.6 fixed the issue for now https://100001.onl/ .
Also oddly enough the connection was "connected at the FW , but disconnected at the Forticlient. There was an error under username in the FW: Two-Factor Authentication is not enabled.
Anyone else see this?

[Dhruvin_patel]

Greetings!

It seems like the issue you encountered with FortiClient connectivity at 48% after upgrading to FortiOS 7.4.7.

I found some references with similar issues after the upgrade, 

https://www.reddit.com/r/fortinet/comments/1i5u7bw/7017_fortios_breaks_sslvpn_using_saml_to_entra/

Using an external browser in FCT VPN config as https://community.fortinet.com/t5/Support-Forum/7-0-17-breaking-SAML/m-p/371377#M261500 fixes the issue.

Best Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.