SAML for forticlient

[aabee]

Hi All,

We have Azure SAMl configured for VPN client and has a conditional policy as well to only allow login from domain joined devices.

This is working as expected, how ever the auto connect with azure ad option is not working.

Tried with different documentation and articles still same, logs also doesn’t have much info.

[kiri]

hi there,

conditional policies need an external browser:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Implementing-device-based-Conditional-Acce...

Is this what you're after?

- Have you found a solution? Then give your helper a "Like" and mark the solution.

[funkylicious]

hi,

last i checked the documentation for autoconnect this was available from EMS.

do you have a EMS or just using FortiClient VPN only/unmanaged ?

[kiri]

all the results I found in fortinet docs have ems as component to autoconnect solution
it looks like ems is mandatory