SAML FSSO with FortiAuthenticator and Microsoft Azure AD

In this example, you will provide a Security Assertion Markup Language (SAML) FSSO cloud authentication solution using FortiAuthenticator as the service provider (SP) and Microsoft Azure AD, as the identity provider (IdP).

To configure SAML FSSO with FortiAuthenticator and Microsoft Azure AD:

1. Microsoft Azure related configurations:
   1. Creating a tenant in Azure Portal.
   2. Creating an enterprise application in Azure Portal.
   3. Setting up single sign-on for an enterprise application
      1. Adding a user group SAML attribute to the enterprise application.
      2. Adding users to an enterprise application.
   4. Adding the enterprise application as an assignment.
   5. Registering the enterprise application with Microsoft identity platform and generating authentication key.
2. FortiAuthenticator related configurations:
   1. Creating a remote OAuth server with Azure application ID and authentication key.
   2. Creating a remote SAML server .
   3. Setting up SAML SSO in FortiAuthenticator .
3. FortiGate related configurations:
   1. Adding an FSSO agent.
   2. Configuring an interface to use an external captive portal.
   3. Configuring a policy to allow a local network to access Microsoft Azure services.
   4. Creating an exempt policy to allow users to access the captive portal.
4. Results.