SAML login redirect URL

[ahoffer]

openfortivpn version 1.23.1.

1. I run sudo my.job.com:10443 --saml-login (Ubuntu 24)
2. openfortivpn prints:

INFO:   Listening for SAML login on port 8020
INFO:   Authenticate at 'https://my.job.com:10443/remote/saml/start?redirect=1'

3. openfortivpn timesout
4. openfortivpn prints:

ERROR:  Finally failed to retrieve SAML authentication token
ERROR:  Failed to retrieve SAML cookie from HTTP

When I use FortiClient VPN with my.job.com:10443, a browser pops open with and I can see from the URL that host is resitofgt.job.com, not my.job.com

Somehow, FortiClient VPN knows that the token is available at a different URL. Can openfortivpn also get the proper URL for the token and use it, the same way that FortiClient VPN does?

[justalinuxuser1337]

This is what I'm using, maybe it will help you.

Via terminal
sudo openfortivpn my.website.com:443/remote/login --saml-login --realm=xyz

Via config file (/etc/openfortivpn/config)

host = my.website.com
port = 443
saml-login = 8020
username = john
realm = xyz
set-dns = 1

[ahoffer]

This is what I'm using, maybe it will help you.

Via terminal sudo openfortivpn my.website.com:443/remote/login --saml-login --realm=xyz

Via config file (/etc/openfortivpn/config)

host = my.website.com
port = 443
saml-login = 8020
username = john
realm = xyz
set-dns = 1

I could not make that work for me. For SSO the browser is redirected login.microsoftonline.us. It hangs for bit and then times out with a message that is failed to retrieve SAML authentication token.