Here we assume you have already set the appropriate Fabric Connector configurations. This guide will only explain how to configure the SAML SP and IDP settings.
| Section |
|---|
|
| Column |
|---|
Log in to the root FortiGate.
Go to Security Fabric > Fabric Connectors and double-click the Security Fabric Setup card.
|
| Column |
|---|
|
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
| 
|
|
|
...
| Section |
|---|
|
| Column |
|---|
In the SAML SSO Window Specify the SP address. This is essentially the URL or the IP address of the Fortinet UI you wish to log onto.
Expand SP details |
| Column |
|---|
|
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
| 
|
|
|
Log back in. to the DualShield Admin Console
...
| Column |
|---|
Go to SSO>Service Providers |
...
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
Click on 
Image Removed on the top right.
...
| Column |
|---|
Fill in the details as per screenshot on right and make sure you select SAML 2.0(Without Metadata) as Type. |
...
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
...
...
Copy and Paste the Entity ID, ACS and Logout URL from the SP details on the Fortinet UI (see above)
...
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
...
| Column |
|---|
The completed Service Provider dialogue box will look like this: |
...
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
...
| Column |
|---|
Click on Attributes at the top |
...
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
...
...
Click Create
Use the following Values:
...
Click Save
...
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
Click Save again
| Section |
|---|
|
| Column |
|---|
Go to SSO>SSO Servers |
| Column |
|---|
|
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
| Section |
|---|
|
| Column |
|---|
Select the drop down menu corresponding to the SSO server you will be using and click on View |
| Column |
|---|
|
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
| Section |
|---|
|
| Column |
|---|
Click on Display Metadata at the bottom |
| Column |
|---|
|
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
|
| Section |
|---|
|
| Column |
|---|
Search through the metadata for the Entity ID, Single Sign-On URL and Single Logout URL |
| Column |
|---|
|
| Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|
 Image Removed
 Image Removed
|
| Section |
|---|
|
| Column |
|---|
Go back to the Fortinet Ui to IdP Settings. Set the IdP type to Custom. Select the Remote Certificate you uploaded earlier (Refer to Import IdP Certificate onto Fortinet) Copy and out Entity ID, Single Sign-On URL and Single Logout URLfrom the IdP metadata on Dualshield and past them into the corresponding fields under IdP Settings on FortinetClick OK | | Column |
|---|
| | Panel |
|---|
| borderColor | #9EBEE5 |
|---|
| bgColor | #f0f0f0 |
|---|
| borderWidth | 1px |
|---|
|  Image Removed
|
|
|