External IdP integration

Customers can integrate their own IdP with FortiCloud. FortiCloud supports fine grained permission profile for external IdP users through external IdP IAM role. External IdP roles allow external users to log in to a cloud portal using their organization’s ID provider. External IdP roles are authenticated with a custom login page. After the user is authenticated, they are redirected to a page where they can select the cloud portals assigned to their account.

One account can have more than one external IdP role. User accounts with multiple roles are required to select a role before they can access a portal. Users with no roles assigned to their account are blocked. With IdP initiated authentication, customers can access FortiCloud Products, Services and Support.

If connected to the Organization's root account, external IdP users can be granted permissions to manage member accounts within Organizations.

See External IdP and External IdP roles in the IAM guide.