# FortiWeb

> Protect access to a website published with FortiWeb using SAML and Ironchip: create the application, the SAML server and the Site Publish rule.

URL: https://docs.ironchip.com/en/identidad/integraciones/red/fortiweb/

This guide explains how to protect access to a website published with **FortiWeb** using Ironchip and [SAML](https://docs.ironchip.com/en/identidad/protocolos/saml/).

## Requirements

- Access to the Ironchip admin console.
- A user with permissions to make changes in FortiWeb.

## Configure Ironchip

1. In the Ironchip admin console, go to **Applications**.

   [Image: Applications section of the Ironchip admin console]

2. Click **New Application** and select **SAML**.

   [Image: New Application button]

   [Image: SAML application type selection]

3. Above the application name you see the **Service Provider** and **Identity Provider** sections.

   [Image: Service Provider and Identity Provider sections of the application]

   - In **Service Provider** you import the FortiWeb metadata.
   - **Identity Provider** holds the Ironchip metadata, which you import into FortiWeb.

## Configure FortiWeb

### SAML server

1. In FortiWeb, go to **User > Remote Server > SAML Server** and click **Create New**.
2. Give the SAML server a name (**Name**) and, in **Entity ID**, enter the IP or DNS name of the website you want to protect.
3. Get the Ironchip metadata. Its URL is in the **URL Metadata** field, at the bottom of the **Identity Provider** section of the application in the Ironchip admin console.

   [Image: URL Metadata field at the bottom of the Identity Provider section of the Ironchip application]

4. Open that URL in a browser to download the XML file. In FortiWeb, under **Identity Provider Metadata**, click **Upload** and upload that XML file. Click **OK**.

   [Image: FortiWeb SAML server with the Entity ID and the Identity Provider Metadata Upload button]

5. With the SAML server created, select it on the **SAML Server** tab and click **Generate Service Provider Metadata**. Another XML file downloads.

   [Image: Generate Service Provider Metadata option]

6. In the application in the Ironchip admin console, open the **Service Provider (SP)** section. In **SP Metadata**, select **File**, choose that XML file and click **Import**.

   [Image: Importing the FortiWeb metadata into the Ironchip application]

7. Click **Add** to finish creating the application.

### Site Publish rule

Apply the SAML server to the **Site Publish** rule so that it asks for authentication on access.

1. In FortiWeb, go to **Application Delivery > Site Publish > Site Publish** and edit the rule on the **Site Publish Rule** tab.
2. In **Client Authentication Method**, select **SAML Authentication**.
3. In **SAML Server**, select the SAML server you created and click **OK**.

   [Image: Site Publish rule with the SAML server applied]

## Give users access

Give users access in the application you created in the Ironchip admin console: go to **Applications**, find the FortiWeb application and, in the **Add access** column, click **Add**.

[Image: Add button to give access in the FortiWeb application]

## Verify the integration

Open the published website as a user who has access to the application. FortiWeb asks you to authenticate with Ironchip before it lets you in.