FortiNet "Credentials or SSLVPN configuration is wrong. (-7200)" Error During Okta SAML Authentication
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
FortiNet or FortiClient generates a credentials or SSLVPN configuration error during Secure Assertion Markup Language (SAML) authentication with Okta. Configuring the VPN connection to use an external browser as the user-agent for SAML authentication resolves the issue. The exact error message appears as follows:
Credentials or SSLVPN configuration is wrong. (-7200)
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- FortiNet / FortiClient
- Secure Assertion Markup Language (SAML)
- Single Sign-On (SSO)
Solution
How is the FortiNet credentials or SSLVPN configuration error resolved?
Configure the FortiNet or FortiClient application to use an external browser for the user-agent during SAML authentication.
- Navigate to Remote Access > Edit VPN Connection.
- Select Use external browser as user-agent for saml user authentication.
- Verify that a web browser session opens and allows SAML authentication between Okta and FortiNet or FortiClient.
NOTE: If the steps do not resolve the issue, contact FortiNet support. The solution does not require any changes to the Okta configuration.
