Certified: August 13, 2026

Solution Summary

This guide describes Fortinet IPsec VPN integration with RSA using SAML 2.0. Use this information to determine which use case and integration type your deployment will employ.

Use Case

Fortinet IPsec VPN can be integrated with RSA using SAML Relying Party. When integrated, users must authenticate with RSA to sign in to Fortinet IPsec VPN. 
      

Integration Types

SSO integrations use SAML 2.0 or HFED technologies to direct users' web browsers to Cloud Access Service (CAS) for authentication. The integration provides Single Sign-On (SSO) using Relying Party. 
   

• Relying Party integrations use SAML 2.0 to direct users’ web browsers to CAS for authentication. With Relying Party integration, CAS can manage either additional authentication only or both primary authentication (for example, user ID and password) and additional authentication, depending on the service provider's capability.
                   

Supported Features

This section shows all the supported features by integration type and by RSA components. Use this information to determine which integration type and RSA component your deployment will use. The next section in this guide contains the instruction steps for how to integrate RSA with Fortinet IPsec VPN using each integration type.

Fortinet IPsec VPN Integration with CAS

Configuration Summary

This section contains instruction steps that show how to integrate Fortinet IPsec VPN with RSA using all of the integration types. 
This document is not intended to suggest optimum installations or configurations. It is assumed that the reader has both working knowledge of all products involved, and the ability to perform the tasks outlined in this section. Administrators should have access to the product documentation for all products to install the required components.
All RSA and Fortinet IPsec VPN components must be installed and working prior to the integration.
This section of the guide includes links to the appropriate sections for configuring both sides for each use case.
      

Integration Configuration

CAS

•   Fortinet IPsec VPN - SAML Relying Party Configuration – RSA Ready Implementation Guide

RSA Terminology Changes

The following table describes the differences in the terminologies used in the different versions of RSA products and components. 

Certification Details

CAS

Fortinet IPsec VPN

Known Issues

No known issues.