Skip to content
IronchipIronchipIronchip Documentation

FortiWeb

This guide explains how to protect access to a website published with FortiWeb using Ironchip and SAML.

Requirements

Section titled “Requirements”
  • Access to the Ironchip admin console.
  • A user with permissions to make changes in FortiWeb.

Configure Ironchip

Section titled “Configure Ironchip”

  1. In the Ironchip admin console, go to Applications.

    Applications section of the Ironchip admin console

  2. Click New Application and select SAML.

    New Application button

    SAML application type selection

  3. Above the application name you see the Service Provider and Identity Provider sections.

    Service Provider and Identity Provider sections of the application

    • In Service Provider you import the FortiWeb metadata.
    • Identity Provider holds the Ironchip metadata, which you import into FortiWeb.

Configure FortiWeb

Section titled “Configure FortiWeb”

SAML server

Section titled “SAML server”

  1. In FortiWeb, go to User > Remote Server > SAML Server and click Create New.

  2. Give the SAML server a name (Name) and, in Entity ID, enter the IP or DNS name of the website you want to protect.

  3. Get the Ironchip metadata. Its URL is in the URL Metadata field, at the bottom of the Identity Provider section of the application in the Ironchip admin console.

    URL Metadata field at the bottom of the Identity Provider section of the Ironchip application

  4. Open that URL in a browser to download the XML file. In FortiWeb, under Identity Provider Metadata, click Upload and upload that XML file. Click OK.

    FortiWeb SAML server with the Entity ID and the Identity Provider Metadata Upload button

  5. With the SAML server created, select it on the SAML Server tab and click Generate Service Provider Metadata. Another XML file downloads.

    Generate Service Provider Metadata option

  6. In the application in the Ironchip admin console, open the Service Provider (SP) section. In SP Metadata, select File, choose that XML file and click Import.

    Importing the FortiWeb metadata into the Ironchip application

  7. Click Add to finish creating the application.

Site Publish rule

Section titled “Site Publish rule”

Apply the SAML server to the Site Publish rule so that it asks for authentication on access.

  1. In FortiWeb, go to Application Delivery > Site Publish > Site Publish and edit the rule on the Site Publish Rule tab.

  2. In Client Authentication Method, select SAML Authentication.

  3. In SAML Server, select the SAML server you created and click OK.

    Site Publish rule with the SAML server applied

Give users access

Section titled “Give users access”

Give users access in the application you created in the Ironchip admin console: go to Applications, find the FortiWeb application and, in the Add access column, click Add.

Add button to give access in the FortiWeb application

Verify the integration

Section titled “Verify the integration”

Open the published website as a user who has access to the application. FortiWeb asks you to authenticate with Ironchip before it lets you in.

© 2026 IRONCHIP TELCO, S.L. All rights reserved. For AI assistants: every page has a Markdown version (add .md to the URL) and the index is at /llms.txt.