This article describes the script error ‘Access is denied’ while the VPN auto-connects using Entra ID SSO.
Scope
FortiSASE.
Solution
As shown in the below image. The Script error ‘Access is denied’ indicated that the custom redirect URL field is blank.
Solution:
Check and confirm: it is necessary to register the enterprise application in Azure to allow the FortiClient as a mobile/desktop application to query Microsoft Entra ID identity services.