Microsoft Entra SSO integration with FortiGate SSL VPN connectivity issue

Question

Scenario: Microsoft Entra SSO integration with FortiGate SSL VPN

I am unable to connect via FortiClient vpn version 7.2.x.x.

But when i use FortiClient vpn client version 7.0.x.x.x to connect SSL VPN via Azure ID with SAML Authentication. its connect in 2nd attempt or 3rd attempt every time not in first attempt. In first attempt ask 2FA but not connected. when i try again in 2nd or 3rd attempt so without 2FA prompt just directly connected. is it bug or configuration issue on FortiClient firewall side or Azure FortiGate SSL VPN application side?? please suggest

Answer 1

Hi, this can help https://community.fortinet.com/t5/FortiClient/Technical-Tip-Unable-to-connect-to-SSL-VPN-with-Azure-SAML-SSO/ta-p/284190

Also you can review this documentation https://docs.fortinet.com/document/forticlient/7.2.0/new-features/396545/support-autoconnect-to-ipsec-vpn-using-entra-id-logon-session-information-7-2-3

Hope this helps!

Remember to accept the answer if it is helpful.