FortiSASE supports SAML, LDAP, and RADIUS as authentication mechanisms applicable to remote-user identity verification. The FortiSASE Administrator Study Guide explicitly identifies its authentication-server configuration objectives as describing remote authentication with LDAP and RADIUS and SAML single sign-on (SSO). It further states that FortiSASE supports authentication through the local database, RADIUS, LDAP, and SAML for SSO.

SAML (A) provides federated SSO by allowing FortiSASE, acting as the service provider, to rely on an external identity provider for user authentication. SAML SSO is specifically supported for FortiSASE SWG and VPN deployments.

LDAP (C) enables integration with directory services such as Microsoft Active Directory. FortiSASE can query directory information and authenticate users against the LDAP infrastructure; LDAPS can be enabled for protected communications. The guide notes an important limitation: LDAP authentication is unavailable for SIA remote users using IPsec VPN, but LDAP remains a supported FortiSASE authentication source.

RADIUS (E) provides centralized remote authentication and supports PAP, CHAP, MS-CHAP, and MS-CHAPv2 authentication methods.

OIDC and TACACS+ are not identified as FortiSASE remote-user authentication sources in this course objective.