This recipe guides you through the process of configuring FortiMail Webmail Single Sign On to work with Active Directory Federation Server (ADFS).
The FortiMail unit needs to be in Server Mode in order for the following procedures to work.
Configuring an LDAP Profile and Domain
|
|
First we’ll need to configure an LDAP Profile if not already created and then create a domain.
- Go to Profile > LDAP > LDAP.
- Select New.
- Enter the required information and then select Create.
- Go to Domain & User > Domain > Domain.
- Select New.
- Enter the necessary information and select the previously created LDAP profile from the User profile dropdown menu.
- Select Create.
|
|
Configuring Webmail
|
|
Next we’ll need to configure the Webmail and save important FortiMail metadata. You must be in Advanced Mode to continue with the following steps.
- Go to System > Customization > Appearance.
- Expand the Web Portal section.
- Select “3rd Party/Single Sign on” from the Login page dropdown menu.
- Select Edit.
- Copy the FortiMail Service Provider Metadata URL and download the FortiMail metadata using the URL. You’ll need this file for the next section.
- Select OK and then Apply.
|
|
Configuring FortiAuthenticator
|
|
Now we’ll need to configure FortiAuthenticator.
- Go to Authentication > SAML IdP > General.
- Enable SAML IDP.
- Select OK.
- Go to Authentication > SAML IdP > Service Provider
- Select Create New.
- Copy the IDP entity id
- Select Import SP metadata and select the metadata you downloaded in the previous section.
- Select Create New in the SAML Attribute section and enter “urn:oid:0.9.2342.19200300.100.1.3” and set the User Attribute to “Email”.
|
|
The post FortiMail WCCP appeared first on Fortinet Cookbook.