Fortinet black logo

Handbook

Adding an AD FS Proxy

Adding an AD FS Proxy

1. Go to User Authentication > AD FS Proxy.

2. Click the Proxy tab.

3. Click Create New to open the AD FS Proxy configuration editor.

4. Make the desired entries or sections, as described in the following table .

5. Save the configuration.

AD FS Proxy

Parameter Description

Name

Specify a unique name for the AD FS Proxy;Valid characters are A-Z, a-z, 0-9,_, and -. No space is allowed.

Note: Once you have saved the configuration, you\ cannot edit the AD FS Proxy name.

Status

Enable—The proxy can be used by AD FS Publish.

Disable—The proxy can’t be used anymore.

Note: If the proxy is used by at least one AD FS Publish,it can’t be disabled.

Method

None: no load balance method will be used, proxy will select the first real server in the AD FS Server Pool. LB METHOD ROUND ROBIN: proxy will select the real server according to Round Robin algorithm.

AD FS Server Pool

Select a real server pool configuration object, which is also an AD FS server farm. See Using real server pools.

Note: this real server pool must use a SSL profile whose SSL is on, and must also select a local certificate.

Federation Service Name

The FQDN string appointed by the AD FS server.

User Name

A user name used to login to the AD FS server.

Password

The password used to login to the AD FS server.

Server Configuration Update Interval

1-8640000; The time interval of AD FS Proxy to get some configuration from AD FS server. Within the interval, the proxy can only use the cached configuration.

Register Timeout

1-3600; the time of AD FS Proxy waiting for the register response from AD FS server.

Connect Timeout

1-3600; the time of AD FS Proxy setup TCP connection with AD FS server

Response Timeout

1-3600; the time of AD FS Proxy waiting for all the response other than register from AD FS server.

Keepalive Timeout

1-3600; TCP connection keepalive timeout.

Adding an AD FS Proxy

1. Go to User Authentication > AD FS Proxy.

2. Click the Proxy tab.

3. Click Create New to open the AD FS Proxy configuration editor.

4. Make the desired entries or sections, as described in the following table .

5. Save the configuration.

AD FS Proxy

Parameter Description

Name

Specify a unique name for the AD FS Proxy;Valid characters are A-Z, a-z, 0-9,_, and -. No space is allowed.

Note: Once you have saved the configuration, you\ cannot edit the AD FS Proxy name.

Status

Enable—The proxy can be used by AD FS Publish.

Disable—The proxy can’t be used anymore.

Note: If the proxy is used by at least one AD FS Publish,it can’t be disabled.

Method

None: no load balance method will be used, proxy will select the first real server in the AD FS Server Pool. LB METHOD ROUND ROBIN: proxy will select the real server according to Round Robin algorithm.

AD FS Server Pool

Select a real server pool configuration object, which is also an AD FS server farm. See Using real server pools.

Note: this real server pool must use a SSL profile whose SSL is on, and must also select a local certificate.

Federation Service Name

The FQDN string appointed by the AD FS server.

User Name

A user name used to login to the AD FS server.

Password

The password used to login to the AD FS server.

Server Configuration Update Interval

1-8640000; The time interval of AD FS Proxy to get some configuration from AD FS server. Within the interval, the proxy can only use the cached configuration.

Register Timeout

1-3600; the time of AD FS Proxy waiting for the register response from AD FS server.

Connect Timeout

1-3600; the time of AD FS Proxy setup TCP connection with AD FS server

Response Timeout

1-3600; the time of AD FS Proxy waiting for all the response other than register from AD FS server.

Keepalive Timeout

1-3600; TCP connection keepalive timeout.