External IDP Authentication

FortiPresence supports integration of third-party Identity Provider (IDP) services to log-in for data analytics. This feature is useful for enterprises that need to secure their user credentials and hence provision FortiPresence access through their own IDP website. The external IDP initiated Security Assertion Markup Language (SAML) assertion consisting of specific IDP attributes is used by FortiCloud/FortiPresence to verify the user account details and grant required access. External IDP authentication is offered in conjunction with FortiCare and FortiAuthenticator. Contact the Fortinet Customer Support team to enable external IDP support and raise an enrollment request with the appropriate FortiCare accounts.

Note: Support for SAML 2.0 and IDP initiated assertion response is required.

After successful authentication on your IDP website, you are re-directed to the FortiCloud portal from where you access FortiPresence based on the configured roles. For more information, see FortiCloud documentation.

Adding External IDP Roles

Access the Identity & Access Management (IAM) service from the FortiCloud portal to add external IDP roles. See Adding external IdP roles.