Re: FortiAuthenticator MFA - SAML

lmarinovic · 06-19-2024

Description This article discusses IPv6 support with FortiAuthenticator. Scope FortiAuthenticator. Solution FortiAuthenticator has only limited support with IPv6. It does not support incoming communication over IPv6 for most of its features. For exam...

lmarinovic · 04-26-2024

Description This article describes how to activate ZTNA control on the Secret. Scope FortiPAM, ZTNA. Solution Activate ZTNA under the Secret and GUI. To activate ZTNA tags on the secret, edit the ZTNA Control under Permission. After activating ZTNA C...

lmarinovic · 11-29-2022

Description This article discusses about the users/groups exclusion from 2FA in the FortiAuthenicator windows agent. Scope FortiAuthenicator windows agent. Solution When excluding the users/groups on FortiAuthenicator Windows Agent, there are conside...

lmarinovic · 08-31-2022

Description This article describes about issue where FSSO events are not collected by FortiGate after upgrade of FortiAuthenticator to 6.4.5. Scope FortiAuthenticator 6.4.5 Solution Disable 'Enable encryption' under Fortinet SSO Methods - > SSO - > G...

lmarinovic · 11-26-2021

Description This article describes inbound proxy settings for source address detection, Scope Solution From version 6.3.1 FortiAuthenticator allows the administrator to specify which HTTP header(s) may or may not be used to retrieve the source IP add...

lmarinovic · 05-13-2024

Hello Tony, Unfortunately this is not supported yet. Even if you set certificate bindings on user. This currently can only work for radius. Only second factor under SAML can be: Mandatory password and OTP All configured password and OTP factors Passw...

lmarinovic · 05-07-2024

Hello, You need to use targets on 1.3.0 and on target switch "Advanced Web Setting" to Enable. After that it will work with View rights for web account, otherwise PAM can not securely transfer the credentials via web so that is why that option is for...

lmarinovic · 07-31-2023

Hi, You are right. There is no application under config firewall shaping-policy in Forti Proxy: FortiProxy: https://docs.fortinet.com/document/fortiproxy/7.2.5/cli-reference/194620/config-firewall-shaping-policy FortiGate: https://docs.fortinet.com/d...

lmarinovic · 07-31-2023

Hi, Like Emirjon said it should be the same. You can find official cli reference here: https://docs.fortinet.com/document/fortiproxy/7.4.0/cli-reference/128620/config-system-saml Best regards, Lazar

lmarinovic · 06-26-2023

Hello, The latest version of FSSO Collector Agent is 0311. You can find that version in support portal in download section of FortiGate OS 7.2.5 and 7.4.0. You can try with upgrade and the crosscheck the situation. It hard to guess without the logs w...

User Statistics

User Activity

Technical Tip: IPv6 support

Technical Tip: How to activate ZTNA control on the Secret

Technical Tip: Excluding the users/groups from 2FA in the FortiAuthenicator windows agent

Technical Tip: FSSO events are not collected by FortiGate after upgrade of Fortiauthenticator to 6.4.5

Technical Tip: Inbound proxy settings for source address detection