Search for the user, click it, click Select: In the App settings open Users and groups, then + Add user/group: In a real-life environment you would probably allow all users to use the app or use group-based assignment. Not sure about this, but for test purposes add the user who can use our SAML SSL VPN login. If the certificate is wrong, most likely you will get this error later on:Ĭonfig vpn certificate remote rename REMOTE_Cert_1 to Azure_SAML end show vpn certificate remote FTG-example # show vpn certificate remote config vpn certificate remote edit "Azure_SAML" set range global next end The final setting should look like this (check username and group parameters):įrom section 4 Set up Test FortiGate SSL VPN copy and save (we will use it later) content ofįrom section 3 SAML Signing Certificate download file under Certificate (Base64): Enable Customize the name of the group claim. I am still not sure about this part.Ĭlick on oups (do not use context menu But this option was always unavailable for me. We need to add another claim, this time a Group claim. Set the following (use autocompletion when possible): Parameter I found no reason for this - just re-created the Azure App. User Attributes & Claimsĭuring one of the tests "Add new claim" was inactive. Make sure that value is set as Default were available:įinally, Save.
In the App settings click Edit under section 1: Use FQDN ( if this domain points to the correct SSL VPN portal IP address). In my test case, the SSL VPN portal address base is. You can see this data on SSL-VPN Settings page of the FortiGate: Check IP-address or FQDN of Fortigate interface used for incoming SSL VPN connection and available from the world (usually WAN). Set up single sign on click Get Started:Ĭreate SSL VPN portal base address. If not - go back to the Enterprise applications section and find the new app manually (by first letters of the name), open it by clicking: You should be redirected to the app setting page. Give it distinguish name and press Create at the bottom of the page:Īdding the new application will take a few seconds. Search for FortiGate and choose the corresponding result: Ĭlick Enterprise applications in the main menu and then +New application: Login into Azure Active Directory admin center at.
0 kommentar(er)
