As of December 2024 FortiClient VPN has been secured with
The connection comes up as follows:
User have to click the SAML Login and are taken to a rowser connection to vpn.wixon.com:8443/remote/saml/start?redirect=1.
Clicking the ADVANCED link users received the following browser dialog and must click Continue to vpn.wixon.com (unsafe):
On first use their email address and password are needed to perform Log in.
At this point the DUO prompt gets pushed. Approve is required in DUO.
This is because the connections are now configured as follows:
vpn.wixon.com
vpnback.wixon.com