NSE7 Advanced VPN and Zero Trust Practice Question
A company wants to use FortiGate as a SAML service provider (SP) for authenticating administrators to the FortiGate GUI. The identity provider (IdP) is Azure AD. After configuration, administrators are redirected to Azure AD login but receive an error that the SAML request is invalid. What is the most likely misconfiguration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The IdP's entity ID or SSO URL is incorrectly entered on FortiGate
As an SP, FortiGate must be configured with the correct IdP entity ID and SSO URL. If the IdP entity ID is incorrect, the IdP rejects the SAML request.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The IdP's entity ID or SSO URL is incorrectly entered on FortiGate
Why this is correct
If the IdP entity ID or SSO URL is wrong, the SAML request will be considered invalid by the IdP.
- ✗
The FortiGate's SP entity ID does not match the Azure AD application's identifier
Why it's wrong here
The SP entity ID is configured on the IdP side; mismatch causes different errors.
- ✗
The administrator's account is not synchronized with Azure AD
Why it's wrong here
Account sync issues cause authentication failure, not invalid request.
- ✗
The certificate used for signing is not trusted by the IdP
Why it's wrong here
Certificate trust issues usually cause signature validation failures, not 'invalid request'.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.