SAML Applications

A SAML IdP Proxy is a bridge or gateway between a federation of SAML IdPs and a federation of SAML SPs:

To an SP, an IdP Proxy looks like an ordinary IdP. Likewise, to an IdP, an IdP Proxy looks like an SP. Thus an IdP Proxy has the combined capability of both an IdP and SP.

With FTC providing SAML and OIDC idP interface, we can move the application into the scope of FTC SaaS service and make use of existing SSO protocol to integrate with Forti ecosystem, which already supports SAML login. This relieves the FortiDevices from private integration with FTC, as long as it uses SAML SP for authentication. FTC can introduce new features like FIDO, adaptive authentication without downstream support.

Customer does not need to worry about device SN and FTC license ownership.