Configuring remote authentication and onboarding users

Depending on the authentication source, the user configuration steps differ. The example shows configuring FortiSASE endpoint mode with a single sign on (SSO) connection with Microsoft Entra ID via SAML, where Entra ID is the identity provider (IdP) and FortiSASE is the service provider (SP). This feature allows end users to connect to VPN by logging in with their Entra ID credentials.

Other methods of user authentication do not work once you enable SAML SSO.

For configuring other authentication sources, see Authentication Sources and Access.