Mac
Apple MacOS VPN client configuration
Installing and setting up FortiClient on Orchard managed hosts
Installation
The FortiClient software can be installed from the Self Service application (green/blue/red/orange rotated square icon). You will find it in the 'All' section, click the 'Install' button to begin installation.

Once installed you will be asked to approve the addition of a VPN configuration - click Allow.

FortiClient is now installed and can be configured.
Configuration
Launch the FortiClient application, tick the box to agree to the terms of use and click 'I accept'.

At this point you should find a pre-configured connection called FMRIBUsers for connecting to the FMRIB VPN service. This will authenticate with your University SSO.
Configuring FortiClient on macOS 14+
Initial Installation
To get started, download 'FortiClient 7.4 VPN-Only' from FortiClient.com - https://links.fortinet.com/forticlient/mac/vpnagent - this should download the latest version - you need 7.4.3 as a minimum.
Once downloaded, double click on 'FortiClientVPN_OnlineInstaller.dmg' to open the installer container and run the ForticlientUpdate.app within. This will download the required components and when finished, click the Launch button to begin the next phase of the installation. This download step can take some time and even fails from time to time.
When/if prompted Allow the FortiTray VPN Configuration addition.

Configuration
The configuration of the VPN service is provided by a configuration file on our registration server. named 'FMRIB User VPN (macOS)':
https://register.fmrib.ox.ac.uk/registration/help#vpn-config
Once downloaded, open FortiClient VPN and then click on `Configure VPN` (or open the burger menu to the side of an existing configuration and choose `Add a new connection`.
In the next page click on the tab 'XML' then click 'Import XML Configuration' - browse to the file you have downloaded, select it and click 'Open' - ignore the option to enter a password and click Import.
At this point quit and reload FortiClient VPN and you should now find a FMRIBUser VPN without a username/password field. Use this to connect, using your University SSO account when prompted in a web browser window.
