Forticlient VPN Linux CLI - How do you enable Single Sign On (SSO) for VPN Tunnel through the CLI?

[eblosh-nio]

I have a user who is attempting to connect to a VPN using the Forticlient Linux CLI client. In order for them to connect, they need to Enable "Single Sign On (SSO) for VPN Tunnel". I don't see an option for enabling this through the CLI. When I view the VPN profile it shows as disabled.

Does anyone know how I can enabled this option in the Forticlient Linux CLI?

$ forticlient vpn view MYVPN
VPN: MYVPN
  Remote Gateway: vpn.myVPN.com:10443
  Client Certificate: None
  Authentication: Disabled
  Single Sign On (SSO) for VPN Tunnel: Disabled
  Auto Connect: Disabled
  Always Up: Disabled
  Save Password: Disabled

$ forticlient version
FortiClient Version: 7.0.8.0292
=====================================
 Engines
=====================================
AntiVirus:          6.00282
Vulnerability:      2.00031
=====================================
 Signatures
=====================================
AntiVirus:          1.00000
AntiVirus Extended: Unavailable
Vulnerability:      1.00034
Sandbox:            Unavailable

$ lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 20.04.6 LTS
Release:	20.04
Codename:	focal

FortiClient  

[Jean-Philippe_P]

Hello eblosh-nio, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[psevca]

Hello, the SSO can be enabled via Forticlient GUI only, there's no CLI for this.

• To configure SAML SSO authentication for VPN tunnel in FortiClient, on the Remote Access tab, edit or create a new VPN tunnel. Select the Enable Single Sign On (SSO) for VPN Tunnel checkbox. 

https://docs.fortinet.com/document/forticlient/7.2.0/administration-guide/402514/saml-support-for-ss...

Thanks

Peter Sevca