Fortinet white logo
Fortinet white logo

Admin Guide

Adding user source

Adding user source

  1. Click Authentication > User Source.

  2. Click Add User Source.

  3. Under Source Information, make the following configurations and click Next.

    Parameter Description
    Name Specify the user source name.
    prefix System-generated; no action is needed.
    Username Attribute Enter a specific attribute in the SAML application or user profile that is used in the username.
    Login Hint Enter a key that help the IdP to identify the user to authenticatem
    Realm Select a realm.
    Interface Select an interface.
    Domain Select a domain to add domain mapping, or click the + sign to add an new domain mapping.
  4. Under Interface Detail, make the following configurations, and click Next.

    Parameter Description
    POST Binding If enabled, SAML messages will be encoded and sent in the body of HTML POST requests.
    Include Subject If enabled, the <Subject> element that specifies the user expected in authentication assertions will included be included. This allows the IdP to bypass the username input on the login page.
    Signing Certificate Upload the signing certificate.
    SP Metadata
    • Entity ID — The Entity ID of the IdP Proxy.

    • ACS URL — The Assertion Consumer Service URL automatically generated for your user source.

    • SLO URL —The Single Logout URL automatically generated for your user source.

    IdP Metadata
    • Entity ID — The Entity ID associated with your IdP.

    • Login URL — The Login URL of your IdP.

    • Logout URL — The Logout URL if your IdP.

  5. Under Attribute Mapping, enter your customized attribute, click the + sign, add the mapped attribute, and click Save.

For more information, see Using SSO applications.

Adding user source

Adding user source

  1. Click Authentication > User Source.

  2. Click Add User Source.

  3. Under Source Information, make the following configurations and click Next.

    Parameter Description
    Name Specify the user source name.
    prefix System-generated; no action is needed.
    Username Attribute Enter a specific attribute in the SAML application or user profile that is used in the username.
    Login Hint Enter a key that help the IdP to identify the user to authenticatem
    Realm Select a realm.
    Interface Select an interface.
    Domain Select a domain to add domain mapping, or click the + sign to add an new domain mapping.
  4. Under Interface Detail, make the following configurations, and click Next.

    Parameter Description
    POST Binding If enabled, SAML messages will be encoded and sent in the body of HTML POST requests.
    Include Subject If enabled, the <Subject> element that specifies the user expected in authentication assertions will included be included. This allows the IdP to bypass the username input on the login page.
    Signing Certificate Upload the signing certificate.
    SP Metadata
    • Entity ID — The Entity ID of the IdP Proxy.

    • ACS URL — The Assertion Consumer Service URL automatically generated for your user source.

    • SLO URL —The Single Logout URL automatically generated for your user source.

    IdP Metadata
    • Entity ID — The Entity ID associated with your IdP.

    • Login URL — The Login URL of your IdP.

    • Logout URL — The Logout URL if your IdP.

  5. Under Attribute Mapping, enter your customized attribute, click the + sign, add the mapped attribute, and click Save.

For more information, see Using SSO applications.