SAML between FORTIGATE 400F FORTIAUTHENTICATOR AND FORTIPAM 1.5

[AMINE-GHEZALI]

Hi support, 

am currently preparing the deployment of FortiPAM for SSL VPN access. Today, users authenticate with username + password + a token generated by FortiAuthenticator. FortiPAM is also integrated with the FortiAuthenticator.

My question is: how can I change the configuration so that when a user connects through the SSL VPN (username + password + token), the authentication is redirected to FortiPAM, and once inside FortiPAM, the user is not asked to enter the token again since they are already authenticated through FortiAuthenticator?

Br 

[AEK]

Hi Amine

For SAML SSO FortiPAM and FortiGate should be configured as SP with FAC as IdP.

https://docs.fortinet.com/document/fortiauthenticator/6.5.0/cookbook/52061/fortigate-ssl-vpn-with-fo...

https://docs.fortinet.com/document/fortipam/1.7.0/examples/944560/2fa-on-fortipam-for-saml-users-usi...

Hope it helps.

[AMINE-GHEZALI]

Thanks, it works.