Click Upload and browse to select the AuthPoint certificate file that you downloaded in Step 5. From the Import drop-down list, select Remote Certificate. In the Additional Features section, enable the Certificates toggle. For information about how to configure interfaces, see the Fortinet User Guide. Configure the external interface (wan1) and the internal interface (internal2). Log in to the FortiGate 60E web UI at The default IP address is 192.168.1.99. The AuthPoint metadata provides your resource, in this case Fortinet SSL VPN, with information necessary to identify AuthPoint as a trusted identity provider. If you do not have a certificate, or if all of your certificates have expired, click Add Certificate and use the newly created certificate. We recommend that you choose the certificate with the latest expiration date. Next to AuthPoint certificate you will associate with your resource, click and select Download Certificate and Download Metadata. If you have a Service Provider account, you must select an account from Account Manager. From the navigation menu, select Configure > AuthPoint. After you have that, you can configure Fortinet SSL VPN. from the Certificate Management page in the AuthPoint management UI. 
To start, you must download the metadata file The metadata provides your resource with information necessary to identify AuthPoint as a trusted identity provider.
You have an AuthPoint identity provider (IdP) certificate An AuthPoint IdP certificate is required for SAML authentication. A token is assigned to a user in AuthPoint. End-users can log in to FortiGate 60E web UI. This diagram shows the data flow of an MFA transaction for Fortinet SSL VPN.īefore you begin these procedures, make sure that: 
Fortinet SSL VPN Authentication Data Flow with AuthPointĪuthPoint communicates with various cloud-based services and service providers with the SAML protocol. This integration was tested with v7.0.0 build0066 of FortiGate 60E.
For this integration, we set up SAML with AuthPoint. Fortinet SSL VPN must already be configured and deployed before you set up MFA with AuthPoint.įortinet SSL VPN can be configured to support MFA in several modes. This document describes how to set up multi-factor authentication (MFA) for Fortinet® SSL VPN with AuthPoint as an identity provider. Fortinet FortiGate SSL VPN Integration with AuthPoint Deployment Overview
0 kommentar(er)
