Fortinet black logo

Administration Guide

Home FortiSandbox 4.4.0 Administration Guide
4.4.0
4.4.5
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6

SAML SSO in HA-Cluster

SAML SSO in HA-Cluster

To keep the non-primary SSO settings with the matched certificate, import all HA non-primary nodes’ SSO IdP certificates into the HA primary node before the real-time synchronization or HA failover.

Primary and secondary nodes with different SSO methods

SAML SSO in HA-Cluster is only supported locally. When the HA primary and secondary nodes have different SSO methods:

  • Before you enable HA primary, synchronize the real-time settings for Administrators, Admin Profiles, Device Groups, LDAP/RADIUS Servers and Certificate.

  • Ensure all SSO certificates on all HA nodes are imported on the HA primary node. This is because the SSO settings on secondary nodes are not overridden by the primary node. Only the certificates will be replaced.

  • When HA failover is triggered, the SSO setting will not be synchronized. However, the certificates will be overridden.

Previous
Next

SAML SSO in HA-Cluster

To keep the non-primary SSO settings with the matched certificate, import all HA non-primary nodes’ SSO IdP certificates into the HA primary node before the real-time synchronization or HA failover.

Primary and secondary nodes with different SSO methods

SAML SSO in HA-Cluster is only supported locally. When the HA primary and secondary nodes have different SSO methods:

  • Before you enable HA primary, synchronize the real-time settings for Administrators, Admin Profiles, Device Groups, LDAP/RADIUS Servers and Certificate.

  • Ensure all SSO certificates on all HA nodes are imported on the HA primary node. This is because the SSO settings on secondary nodes are not overridden by the primary node. Only the certificates will be replaced.

  • When HA failover is triggered, the SSO setting will not be synchronized. However, the certificates will be overridden.

Previous
Next