cannot longer connect FortiClientVPN 7.2.2.0116 Azure SAML MFA

[fabs]

Hello,

since updating iPhone iOS from the last version 16 to the current 17.0.1, connecting via FortiClientVPN is no longer possible. The Azure SAML authentication takes place, but it stops at "Connection".
FortiClient VPN 7.2.2.0116
Fortigate 7.2.5 build1517
Can anyone here report the same problem?

[sslee6630]

Thanks

appstore - FortiClientVPN 7.2.2.0116 => not working (Connecting...)

appstore - FortiClient 7.2.2.0116 => working

[fabs]

Hi @sslee6630 
what do you mean with appstore - FortiClient 7.2.2.0116 => working ?

[xDivour]

Hes saying the EMS version of the app is working the one called "FortiClient" the "FortiClientVPN" and the "FortiClient" apps have the same build number. I think were all on the same page that the free version is not working the EMS one is even though they have the same build number

[sslee6630]

@fabs 

Forticlient VPN : https://apps.apple.com/us/app/forticlient-vpn/id1475674905

Forticlient : https://apps.apple.com/us/app/forticlient/id1474294106

Both app versions are the same as 7.2.2.0116 .(Both app Released on Sep 22.)

But only ForticlientVPN app has a problem.
Use a Forticlient app.

[jcordero]

I have same issue since I updated to IOS 17.0.1. 
Fortigate: v7.2.5 build1517  
Fortivpnclient version: 7.2.2.0116
MFA: SAML - SSO 

[jcordero]

Here some findings:  
The app FortiClient VPN (https://apps.apple.com/us/app/forticlient-vpn/id1475674905) doesn't work after IOS upgrade.

But I installed FortiClient (without VPN) (https://apps.apple.com/us/app/forticlient/id1474294106) and the connection was successful.
Same app version:  7.2.2.0116

[ShayneA]

I have tested with FortiClient (without VPN) and was able to connect as well.

[jcordero]

Hey guys the Forticlient VPN was updated and now it's working. 
Fortigate: v7.4.1
Forticlient VPN: 7.2.3.0123
SAML - Azure

[PBalochini]

Hello,

Same problems with all iphones using version 7.2.2.0116. Thats the problem.

I install FORTINET VPN Client on my older IPHONE X and is comes with version 7.2.1.0110 and are working as expected.

There are no way do downgrade in APPLESTORE.

The FORTINET VPN CLIENT version 7.2.2 was updated 4 days later. ( 7.2.2.0116)
SSLVPN idle-timeout not disconnnection FCT IOS
SSLVPN DTLS iomplementation
UPDADE to OpenSSL 3.1.2
SSLVPN bug fixes

Sure some thing above will cause this mal funcion....

[PBalochini]

Turn ON debug and got the error 

2023-09-27 06:23:42 [272:root:1310]epollFdHandler,560, sconn=0x7f75c54800[9,-1,-1,-1,-1], fd=9, event=25.

2023-09-27 06:23:42 [272:root:1310]epollFdHandler:630 s: 0x7f75c54800 event: 0x19

2023-09-27 06:23:42 [272:root:1310]Destroy sconn 0x7f75c54800, connSize=0. (root)

Expected was

2023-09-27 06:28:13 [274:root:1311]req: /remote/saml/login

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/identity/claims/tenantid

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/identity/claims/objectidentifier

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/identity/claims/displayname

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/identity/claims/identityprovider

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/claims/authnmethodsreferences

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/claims/authnmethodsreferences

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/ws/2008/06/identity/claims/wids

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.microsoft.com/ws/2008/06/identity/claims/wids

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

2023-09-27 06:28:13 [274:root:1311]stmt: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

2023-09-27 06:28:13 [274:root:1311]stmt: username