HA connection status still shows connected even when the Primary FortiAuthenticator is already shutdown.

FSSO session is not created despite successful Azure AD SAML authentication + 403 Forbidden after repeated attempts.

Problem setting static IP address on a FortiAuthenticator-VM installed on a XenServer.

Allow deletion of the expired user and the local service certificates.

Concatenated style OTP is not working with Windows-AD authentication being enabled.

MAC address parameter in portal policy should only allow MAC addresses.

FortiToken mobile license status on LB nodes shows Unknown.

Limit of 64 characters in SAN DNS field for CSR/Certificate creation.

Error when importing remote LDAP user.

A-P cluster: Link down status of the monitored interface does not trigger failover.

Groups sorting differences when importing LDAP groups in SSO groups and FortiGate filtering.

When signing a CSR via SCEP, FortiAuthenticator returns "Unable to sign request, Unable to find a unique name".

SMTP error messages does not provide accurate information.

Update 6.3.1 produces 503 server error for GUI under heavy SCEP traffic.

HA failover does not work reliably.

Usage Profile "TIME USAGE=Time used" is not triggering COA or disconnect request to FortiGate.

Unable to expand FortiAuthenticator "data drive" beyond 2 TB.

When FortiAuthenticator has a RADIUS client set as subnet, RADIUS accounting disconnect messages are not sent.

Unable to import all FTK hardware tokens from the same purchase order; need to add them all manually.

FortiAuthenticator IdP proxy fails to proxy SAML assertions received from a remote IdP when a user attribute with same name exists.

Octet/ASCII conversion for all RADIUS attribute-value pair inputs.

Local users export/import feature does not work if bcrypt hash is used.

Smart Connect WPA2-Personal profile fails when WPA2-Enterprise settings are left in place.

Raid widget is showing wrong status.

Sponsor accounts can add guest user accounts to non-guest groups.

FortiAuthenticator only applies one captive portal policy and ignores RADIUS client IP/AP IP in portal policy selection.

Local cert for GUI rejected despite SAN field.

SMS gateway HTTP/HTTPS - Inconsistent JSON object type used for the phone number attribute.