The SSL VPN using Microsoft MFA is stuck at 40% after upgrading to firmware version 7.4.9

[suryana]

After upgrading FortiGate 101F to firmware 7.4.9, SSL VPN authentication via Azure AD SAML (Microsoft MFA) stops at 40%.

[Toshi_Esumi]

Did you see the discussion below? The same change is in 7.4.9 as mentioned in the FTNT KB referred in the thread.
https://community.fortinet.com/t5/Support-Forum/SSL-VPN-Doesn-t-work-after-firmware-update-7-2-12/m-...

Toshi

[hpenmetsa]

Hi @suryana 

From FortiOS v7.4.9, FortiGate verifies the signature of the SAML Response message. Please check the document below and follow the steps as mentioned.

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SAML-Authentication-fails-after-firm...