Configuring the root FortiGate as the IdP

To configure the root FortiGate as the IdP:

1. Log in to the root FortiGate.
2. Go to Security Fabric > Fabric Connectors and double-click the Security Fabric Setup card.
3. In the Settings tab, enable SAML Single Sign-On. The Mode field is automatically populated as Identity Provider (IdP).
4. Enter an IP address in the Management IP/FQDN field.
5. Enter a management port in the Management port field.

   The Management IP/FQDN will be used by the SPs to redirect the login request. The Management IP/FQDN and Management port must be reachable from the user's device.

6. Select the IdP certificate.

   

7. Click OK.