FortiAnalyzer management from FortiCloud via SSO 7.2.5

In addition to enabling access from FortiCloud, you can now log into the FortiAnalyzer GUI from the FortiCloud portal via Single Sign On (SSO).

Your FortiAnalyzer device must be registered with FortiCloud. For a FortiAnalyzer high availabiliy (HA) cluster, each member should independently register to FortiCloud. However, only the primary unit can enable remote access from FortiCloud.

To enable remote management from FortiCloud via SSO:

1. In the FortiAnalyzer GUI, go to System Settings > Admin > SAML SSO.

2. Enable Allow admins to login with FortiCloud.

   

3. Logout of the FortiAnalyzer GUI.

4. At the FortiAnalyzer GUI login page, click Login with FortiCloud.

   

   You are redirected to login via FortiCloud.

   

5. Enter your credentials to login.

   In the FortiAnalyzer Admin Session List, the session is SSO.

   

6. Go to System Settings > Dashboard.

7. In the License Information widget, click the edit icon for FortiCloud.

8. Enable Allow Access from FortiCloud.

   If the user has not logged in to FortiCloud, enter the Account ID/Email and Password for the FortiCloud account.

   

9. Click OK.

10. In the FortiCloud portal, view the FortiAnalyzer product. You can now click Remote Access in Manage Cloud Services to directly login to the FortiAnalyzer GUI with FortiCloud using SSO.

    

    The URL shows "[...].device.fortigate.forticloud.[...]". The admin session is SSO. For example, see below.

    

To enable Cloud Management via the CLI:

You cannot enable remote access from FortiCloud if the FortiAnalyzer is managed by a FortiManager. You must disable the management before enabling remote access.

1. In the FortiAnalyzer CLI, enter the following command to login to FortiCloud:

   execute cloud-remote-access login <account-id> <password>

2. In the FortiAnalyzer CLI, enter the following command to enable cloud-management:

   config system central-management

   set type cloud-management

   end