Configuring external IdP

After you have successfully enrolled for external IdP for your FortiCloud account, you can begin to configure the external IdP with the URLs provided by Fortinet Inc..

This document only covers configuring external IdP with Okta and Microsoft Entra ID. However, multiple external identity providers are supported by FortiCloud. This topic includes the following configuration examples:

• Configuring with Okta

• Configuring with Entra ID

Configuring with Okta

External IdP can be configured with Okta.

To configure external IdP with Okta:

1. In Okta, go to Applications > Applications.

2. Navigate to the application you created when enrolling.

3. Edit the General > SAML Settings:

   1. Replace the temporary URLs with the information provided by Fortinet Inc. team:

      Entra ID field	Fortinet Inc. external IdP information
      Single sign-on URL	SP Login (Assertion Consumer Service ACS) URL
      Audience URI (SP Entity ID)	SP Entity ID
      Default RelayState	Portal URL (Relay State)

   2. Click Save.

Configuring with Entra ID

External IdP can be configured with Okta.

To configure external IdP with Entra ID:

1. In Microsoft Azure, select Microsoft Entra ID.

2. Go to Enterprise applications.

3. Navigate to the application you created when enrolling.

4. Select Set up single sign on.

5. Edit the Basic SAML Configuration:

   1. Replace the temporary URLs with the information provided by Fortinet Inc. team:

      Entra ID field	Fortinet Inc. external IdP information
      Identifier (Entity ID)	SP Entity ID
      Reply URL (Assertion Consumer Service URL)	SP Login (Assertion Consumer Service ACS) URL
      Relay State	Portal URL (Relay State)
      Logout Url	SP Logout (SLS)

   2. Click Save.