MFA via M365 with Android problem

[jcrower]

Hey all,

Using the Forticlient VPN for Android (mostly with Samsung phones but other varieties).

Connecting to a Fortigate 81F.

I want to enforce MFA via Microsft 365.  It works fine on Windows desktops, but there is an issue with the Android app.

Firstly it requires Google Chrome which is strange but... when Chrome opens to the M365 login page I go through the motions, switch to the authenticator app type the number in, switch back to the Google Chrome sign-in page but it still has the Approve sign in request page, and Forticlient doesn't  seem to recognise that anything has happened.

I have 2 other apps that work similarly and they work fine.  Is this an issue someone else has come across and hopefully solved?

thanks

j

[Anthony_E]

Hello ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[xshkurti]

@jcrower 
A similar post is already active that has the same problem.

Check it and you can post again here if you have some different settings in your setup

Failed on FortiClientVPN with SSO/SAML + MFA using... - Fortinet Community

[Anthony_E]

Thank you so much!

[jcrower]

I'm back; wow over a year to get back to this!  Thanks @xshkurti for the link.

Part of the reason I am coming back to this is that we have decommissioned ADFS which Azure/Entra ID was delegating authentication to.  I figured that could have been an issue.

We are Hybrid AD, and now with password hash sync, Entra ID is doing our authentication for things like this... however the issue still remains the same.  Unfortunately nothing in the linked thread helped us.

Fortilcient app on my Samsung A14 running One UI 7.0 (Android 15).  Forticlient app version 7.4.3.0185.

After clicking connect, the Micrsoft login page successfully asks for credentials.  MFA number comes up.  I switch to the Authenticator to enter the number.  I switch back to the Chrome windows and it sits there still showing the mfa number.  If I switch back to the Forticlient app it sits there unconnected.