SSO SAML Timeout & Disconnects PSA

[heffe]

Maybe this is knowledge already out there but I just wanted to hopefully save someone else the trouble. I recently setup Azure/Entra SAML SSO for our VPN users on our FG 200F. The setup isn’t hard and there are tons of guides already out there. One thing the guides often skip that I also missed was the default authentication timeout of something like 5 seconds. With MFA enabled this is not enough time. In the FortiGate documentation it recommends setting this to 60 (seconds). This gives the MFA and the user enough time to complete the MFA steps.

config system global

set remoteauthtimeout 60

Hope this information helps someone!

[amrit]

Thanks for submitting the solution. We have couple of documents and articles  available for this 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Error-The-authentication-did-not-complete-...

https://docs.fortinet.com/document/fortiauthenticator/6.6.0/examples/306162/increasing-remote-authen...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explaining-global-set-remoteauthtimeout-us...