Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor III

SSL VPN with SAML (MS Azure with Authc app) AND user certificates?

Hi all, I have a customer that are using SAML authc with Azure for SSL VPN connections which is working well. They would like to use clients certificates as another authentication factor. Is this possible when using SAML? Many thanks in advance!

Valued Contributor

Hi, unfortunately not supported. I tried to find info in the FTNT docs to no avail, but in practice once you configure SAML, you cannot use 

config vpn ssl setting
set reqclientcert enable

to require client certificates. Also on Forticlient once it connects using SAML, the option to specify client certificate is grayed out.

But I'd be glad to find official docs saying this, so bookmarking this post.


Yuri blog: All things Fortinet, no ads.

All opinions are mine only.

Hey mattw,


I found this thread discussing the same question:


I have never tried to combine client certificates and SAML authentication myself in the way described there, so I can't say if it would work or not.

+++ Divide by Cucumber Error. Please Reinstall Universe and Reboot +++
New Contributor III

Thank you @Yurisk and @Debbie_FTNT, your responses are very helpful.