FortiClient/EMS/FAC - Native Azure AD / Microsoft Entra ID and Fortinet Single Sign-On (FSSO) PT3

In this comprehensive guide, we delve into the intricacies of Fortinet Single Sign-On integration, leveraging the capabilities of Azure Active Directory using FortiAuthenicator and FortiClient and its Single Signon Mobility Agent (SSOMA) in an exclusively cloud-based environment. Bid farewell to on-premises Active Directory hassles as we walk you through the final steps of configuration, granting you the prowess to enable Fortinet Single Sign-On with Azure AD alone. Stay ahead in the world of modern authentication - watch now for expert insights and step-by-step instructions!
// Time Stamps //
0:00 - Video Introduction
1:03 - What are the requirements to achieve this?
02:27 - Azure AD Configuration
06:04 - FortiAuthenticator Configuration
07:16 - FortiClient EMS Cloud Configuration (If you are using it)
08:24 - FortiAuthenticator Configuration (PT2)
09:02 - Windows 10 Host Configuration Validation (SSOMA)
09:32 - Creating the FSSO Fabric Connector on the FortiGate
09:50 - Logging out of the Windows 10 Host (1st Attempt!)
10:03 - It's not working, what we found and how we fixed it...
12:31 - It's working let's demonstrate it!
13:42 - Video wrap up including why this is important!
// Chris SOCIAL //
/ chris-eddisford-5b676462
// Keywords //
Fortinet
Fortigate
FortiClient
FortiClient EMS
Azure AD
Microsoft Entra ID
Fortinet Single Sign-On
Forticlient Single Signon Mobility Agent (SSOMA)
FortiAuthenticator
Fortinet how to
Active Directory
Cybersecurity
// HashTags //
#cybersecurity
#networking
#fortinet

[@oinkersable]

Thanks Chris, had been tracking the same so nice to see it in action, you get any further with FortiTrust Identity replacing on prem FAC in this same scenario, for both IDP proxy to Azure and SSOMA to the gates - keep the whole thing SaaS - had noticed one of your other vids from accelerate mentioning this. Great vids btw.

[@FortiBytes]

Glad your enjoying them! I'd love to do a video around FortiTrust the main issue is getting a demo for some of these SaaS (FortiCloud) services is tough I'd like to do a video on SASE for example.
I work for a Fortinet Partner but everything I'm doing on the channel is completely separate including the procurement of licenses and kit and currently its often at my own cost. Fortinet are being amazing and supporting but the faster the channel grows the more clout we will have!
What I plan on doing is making a JIRA Board of "Videos in the works" public and allowing the community to vote on what they want to be prioritised!

[@oinkersable]

@@FortiBytes Yeah I am in the same position myself in terms of labbing and can understand the difficulty trying to get funding rather than dipping into your own pocket, particularly with Public cloud and FortiCloud solutions, especially with the growth of solutions ported to forticloud now. Nice idea on the JIRA board voting but IMO you select your topics very well regardless. What hardware are you using for your VM's, hard to find something with enough cores and ram without being too noisy or too power hungry :) keep up the good work and cheers!

[@chriseddisford1834]

@@oinkersablehey, I have a very old server in a datacentre that’s quite beefy in terms of cpu and ram however unfortunately it’s only got a small disc inside it and I can no longer physically access it to expand it! I’d just consider public cloud being honest provision the compute and when your not using it turn it off. The latest videos Azure was only costing me a couple of pence a day when it was shut off as I was only paying for the storage.

[@anjonsarker2374]

Fine

[@FortiBytes]

Thanks !

[@jgtools]

Hi dear,
is possible to integrate Fortigate FSSO with Entra-ID without bought Azure ADDS ?

[@FortiBytes]

Hi @jgtools I’m no Azure AD expert but I certainly did not purchase Azure ADDS for these videos.

[@philliproberts7179]

yes, you can integrate Azure. In FortiCloud EMS you have option to add AD services or Azure services.