SAML-based authentication for FortiClient remote access dialup IPsec VPN clients
SAML-based authentication for FortiClient remote access dialup IPsec VPN clients is now supported.
The FortiGate authd daemon has been enhanced to support SAML authentication and accepts local-in traffic from the FortiClient by the TCP port number configured in the auth-ike-saml-port
setting.
The ike-saml-server
setting enables a configured SAML server to listen on a FortiGate interface for SAML authentication requests from FortiClient remote access IPsec VPN clients.
For more information about this feature, see SAML-based authentication for FortiClient remote access dialup IPsec VPN clients.