SSL WebPortal Mode | Login Failure

[MaDe]

Good day,

I am new to FortiGate and having some trouble to setup the SSL portal. 

First I used FW 6.2.7 setting up the SSL portal with  http://docs.fortinet.com/document/fortigate/6.2.0/azure-cookbook/584456/configuring-saml-sso-login-f.... 

This works perfect but I had some trouble to open external URLs from the SSL portal.

I opened a ticket and support confirmed there is bug in FW 6.2.7 and I can go to FW 6.4.5. Ok so I updated to FW 6.4.5. But now SSL Portal is not working anymore. I get a <ERR_EMPTY_RESPONSE> from my browser. I tried to debug the login with <diagnose debug application sslvpn -1> and saw this error: 

262:root:6]rmt_web_auth_info_parser_common:460 no session id in auth info [262:root:6]rmt_web_get_access_cache:797 invalid cache, ret=4103

But I don't what it means and how I should proceed. Has anyone had a error like this before and can give me some advice.

Many thanks,

MaDe 

[MaDe]

Do you also have the problem that when you have authenticated yourself and you start an AppProxy application in Azure via shortcut, for example, you have to authenticate yourself again?

[Jond]

Not tried that I'm afraid.

[gsommariva]

I can confirm this solves SAML authentication phase problems.

Graziano

[gsommariva]

I solved SAML authentication phase problems.

As mentioned here

"SSL WebPortal Mode | Login Failure - Fortinet Community"

I had to raise Auth phase timeout. 

config system global 

 set remoteauthtimeout 60

end

(default on my FG was 5) 

Graziano