Granting permissions to new SSO administrator accounts
By default, the SAML SSO account is assigned the no_access administrator profile. Device administrators must assign a security profile to the SAML SSO account that allows access to the FortiGate SP.
To grant permissions to the new SSO administrator account:
- Log in to FGT_B with the device administrator account.
- Go to System > Administrators.
The new Single Sign-On Administrator was automatically created when it logged in the first time.
- Edit the new SSO admin, and change their Administrator Profile.
- Click OK.