The first step to set up SAML integration with FortiGate is to create an application for FortiGate in your DualShield server.

For general instruction on how to create a SMAL application, please refer to

Follow the steps below to build up an application for FortiGate

Create a Logon Procedure


Log on to the DualShield Administration Console and go to Authentication>Logon Procedure 





Click on  on the top right.


In the new Logon Procedure window, please enter the following information:

OptionValue
Name:Enter a friendly name
Type:Web SSO

Click: Save






Add Logon Steps


Select the drop down menu corresponding to the Logon Procedure you will be using and click on Logon Steps.





In the Logon Steps Dialogue box, click the  button.


Tick the desired authentication method, e.g. Static Password






Click Save.


Repeat to add extra steps.


I have added two steps; Static Password and One-Time Password



 



Create an Application


Authentication> Applications





Click on  on the top right.



In the new Application window, please enter the following information:

OptionValue
Name:Enter a friendly name
Realm:Select your Realm
Logon Procedure:

Select the Logon Procedure you had created in the previous step

Click: Save





Publish the Application 


Select the drop down menu corresponding to the Application you will be using and click on Agents.







Tick the box of the SSO Server you will be using and click Save below.