Identity Provider [IdP] Integration - SSO [FortiMail Browser Security]

You can integrate the extension with an external identity provider - such as Entra ID, Google Workspace, and Okta. This integration lets:

• endpoint users sign-in to the extension using their corporate credentials. Each of these users is referred to as an IdP user A user whose credentials are maintained in an external identity provider - not in FortiMail Browser Security..

• admin users specify policy assignment rules that assign policies to users based on user attributes. For details, see Using rules to assign policies.

Note You can configure only a single external identity provider for managing the FortiMail Browser Security user credentials. You can integrate with any external identity provider that supports SAML 2.0.

This section includes the following topics:

• For details on how to add endpoint users using the FortiMail Browser Security console, see Managing Endpoint Users.

  Adding endpoint users using the FortiMail Browser Security console may be useful even for an IdP user A user whose credentials are maintained in an external identity provider - not in FortiMail Browser Security. because it enables you to assign a specific non-default policy to the new users before they first sign-in.

See also: 

• Settings