Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet NSE8_812 Exam - Topic 3 Question 60 Discussion

A FortiGate is configured to perform outbound firewall authentication with Azure AD as a SAML IdP.What are two valid interactions that occur when the client attempts to access the internet? (Choose two.)
A) FortiGate SP sends a SAML request to the IdP. and B) The Microsoft SAML IdP sends the SAML response to the FortiGate SP.
C) The client browser forwards the SAML response received from Microsoft SAML IdP to the FortiGate SP.
D) FortiGate SP redirects the client browser to the local captive portal and then redirects to the Microsoft SAML IdP.

Fortinet NSE8_812 Exam - Topic 3 Question 60 Discussion

Actual exam question for Fortinet's NSE8_812 exam
Question #: 60
Topic #: 3
[All NSE8_812 Questions]

A FortiGate is configured to perform outbound firewall authentication with Azure AD as a SAML IdP.

What are two valid interactions that occur when the client attempts to access the internet? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

by Vernice at May 01, 2026, 03:19 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Willodean
17 hours ago
I agree, A and B make sense. The SAML request and response are key.
upvoted 0 times
...
Mireya
6 days ago
This question is tricky! I think A and B are correct.
upvoted 0 times
...
Natalie
11 days ago
Same here! A and B are straightforward.
upvoted 0 times
...
Lynelle
16 days ago
I feel confident about A and B. Clear steps in SAML process.
upvoted 0 times
...
Rana
21 days ago
True, D complicates things. Focus on A and B for clarity.
upvoted 0 times
...
Chau
27 days ago
D seems off. Captive portal isn't part of the initial SAML exchange.
upvoted 0 times
...
Nell
1 month ago
C is valid too, but A and B are the main interactions.
upvoted 0 times
...
Trina
1 month ago
What about C? The client needs to forward the response too.
upvoted 0 times
...
Malcom
1 month ago
I agree, A and B fit well. SAML request first, then response.
upvoted 0 times
...
Sylvie
2 months ago
I think A and B are correct. Makes sense for SAML flow.
upvoted 0 times
...
Taryn
2 months ago
A and B make sense, but I’m not sure about the order of operations.
upvoted 0 times
...
Dominga
2 months ago
Surprised that Azure AD can handle SAML like this!
upvoted 0 times
...
Shelia
2 months ago
Wait, isn't D a bit off? Seems unnecessary.
upvoted 0 times
...
Vannessa
2 months ago
I think C is also a valid interaction.
upvoted 0 times
...
Lenna
2 months ago
A and B are definitely correct!
upvoted 0 times
...
Amos
3 months ago
I think the Microsoft SAML IdP sending the response to the FortiGate is a key step, but I'm not completely sure about the captive portal part.
upvoted 0 times
...
Delisa
4 months ago
I practiced a similar question where the FortiGate redirected to the IdP, but I can't recall if that's part of the outbound authentication process here.
upvoted 0 times
...
Mollie
4 months ago
I'm a bit unsure about the order of interactions, but I feel like the client browser must play a role in forwarding the SAML response back to the FortiGate.
upvoted 0 times
...
Allene
5 months ago
I remember that the FortiGate acts as a service provider, so I think it definitely sends a SAML request to the IdP first.
upvoted 0 times
...

Save Cancel