Install the FortiClient via Google Play Store but be careful because there are two different versions of FortiClient. One version requires a licence the other is the free version with limited functions which we are using in this manual:


Tap "New VPN"

The connection name can be freely selected and will be shown at the startpage of the app. The "VPN TYPE" is "SSL VPN". Tap on "Create" to continue.

Complete the remaining fields. Note: "Servers" must include the host and the realm (for example: https://<HOST>/<REALM>). Will be 

in most cases (standard vpn tunnel) but it may differ when using a different tunnel.

The configuration for our standard VPN connection should look something like this: 

Tunnel namepub-allCan be freely selected.
Your CIT-Account.
Certificate used for authentication. In this case no certificate is used (default) 
Single Sign OnDisabledCan be ignored (default).
Prompt User CredentialsEnabled

Configuration is saved automatically. Go back to the startpage of the app and tap on the configured vpn connection "pub-all".

Tap on "Connect" and enter your login information (CIT Account). Click on "Login" to continue.

Note: You may be shown a pop up when connecting:

Which means FortiClient cannot check whether the servers certificate is valid or invalid. Future FortiClient versions may be able to validate. Tap on "Proceed" to continue and establish the connection.

When successfully connected you will be shown something like this: