SAML SSO with pre-authorized FortiGates

You can set up SAML SSO authentication in a Security Fabric environment by starting with a root FortiGate that has one or more pre-authorized FortiGates.

After the initial configuration, you can add more downstream FortiGates to the Security Fabric, and they are automatically configured with default values for a service provider.

To set up basic SAML SSO for the Security Fabric:

1. Log in to the root FortiGate of the Security Fabric.
2. Go to Security Fabric > Settings, and join two pre-authorized FortiGates to the root FortiGate.

   

3. Configure the IdP (see Configuring the root FortiGate as the IdP).
4. Configure the SPs (see Configuring a downstream FortiGate as an SP).