Use Cases

Most IdP vendors require a subscription for full access to their services. Be sure to check with your IdP and SPs vendors to see if a premium subscription is required to access their services. This feature is only available to FIC customers with a full subscription. It is not available to trial customers.

One example would be that a customer already has a setup with an IdP and multiple SPs, but doesn't have MFA. Let's say that they're using Google as the IdP to provide the user source and SSL VPN through a FortiGate as the SP. With their current setup, if their end-users try to log in through SSL VPN, they will be directed to the Google login page, where once they input their username and password, they will immediately be allowed to log into SSL VPN. With FIC's IdP Proxy setup, the end-users will experience following instead:

Google login > FIC 2FA OTP page > FGT SSL VPN.

• Example 1: Google SAML as IdP and FortiGate SSL VPN as SP

• Example 2: Azure as SAML IdP and FortiGate as SP

• Example 3: Google OIDC as IdP

• Example 4: Azure OIDC as IdP

• Example 5: FortiGate IPsec as SP

• Example 6: ZTNA application gateway with SAML as SP

• Example 7: Secure authentication for LDAP user source via ZTNA server