- Log in to the root FortiGate.
- Go to Security Fabric > Fabric Connectors and double-click the Security Fabric Setup card.
- Enable SAML Single Sign-On. The Mode field is automatically populated as Identity Provider (IdP).
- Enter an IP address in the Management IP/FQDN box.
- Enter a management port in the Management port box.
The Management IP/FQDN will be used by the SPs to redirect the login request. The Management IP/FQDN and Management port must be reachable from the user's device.
- Select the IdP certificate.
- Click OK.