Due to a known issue, you should not upgrade your FortiPortal scalable cluster deployment from 7.4.8 to 7.4.9.

The issue is under investigation and a fix is being developed.

To improve system security and reduce the chance of exploitation and breach, we recommend that you change the system encryption password after upgrading with the following CLI command:

config system encryption
    set password <new-password>
end

If Site assertion attribute for remote SAML IdP authenticated customer users is not used (not present in the assertions from the IdP), but you want users to have access to all of their respective sites, the new CLI setting needs to be changed as follows after the upgrade is complete:

config system admin setting
    set remote-org-user-all-sites-access enable
end

Allow all sites is no longer enabled by default.