Configuring the root FortiGate as the IdP

To configure the root FortiGate as the IdP:

1. Log in to the root FortiGate.
2. Go to Security Fabric > Settings.
3. In the FortiGate Telemetry section, enable SAML Single Sign-On. The Mode field is automatically populated as Identity Provider (IdP).
4. Enter an IP address in the Management IP/FQDN box.
5. Enter a management port in the Management Port box.

   The Management IP/FQDN will be used by the SPs to redirect the login request. The Management IP/FQDN and Management Port must be reachable from the user's device.

6. Select the IdP certificate.
7. Click Apply.