Users are unable to log in to the SSL VPN using Approve or biometric authentication from CAS.

1. Log in to the Fortigate CLI.
2. Select the correct VDOM based on customer configuration.
3. Configure the remoteauthtimeout parameter:

FEIRDUFG01$ config sys global

FEIRDUFG01(global)$ set remoteauthtimeout 60

FEIRDUFG01(global)$ end

About remoteauthtimeout

• This is a global parameter for LDAP, RADIUS, and other authentication servers.
• It defines the maximum time (in seconds) allowed for a valid token code to be entered before the connection closes.
• Default value: 5 seconds.
• Important: Changing this value affects all remote authentication servers (RADIUS, LDAP, TACACS+).