Skip to main content

Configure your virtual private network (VPN) with MFA

A VPN (Virtual Private Network) will give you the same access as if your computer was connected to the Concordia campus network.
By Oisín Burns

Ensure you've installed the VPN

  • For assistance with a remote connection, please email
    • Include your phone number where we can reach you. 
    • If you don’t get an answer in a timely manner, please email directly. Please note that this e-mail is for Fine Arts faculty, staff and students only.

For staff and faculty, Concordia now requires multi-factor authentication(MFA) to authorize the VPN login, this requires at least FortiClient VPN 7.2.1.
The migration is still ongoing, so you may not yet be affected.

Multi-factor authentication for faculty and staff
Multi-factor authentication for students


The recommended version for Mac is 7.2.1.

VPN support on Mac requires at least macOS Big Sur(11), you will need to upgrade(free) your version of macOS if you are running something older. This may not be possible depending on the age of your Mac.

You can see if your Mac is compatible with at least macOS Big Sur(11) here:

On Mac, if you have an older version of FortiClient VPN installed, you will need to uninstall it first using "FortiClientUninstaller", located in "Applications", before proceeding.

macOS Big Sur(11), Monterey(12) or Ventura(13):

macOS Sonoma(14) is not yet supported.


The recommended version for Windows is 7.2.1

VPN support on Windows requires at least Windows 10.

Windows 7, 8.1, 10 or 11

Configure the VPN

During install you will be prompted to allow the VPN, please do so.

And in "System Preferences", then "Security & Privacy", you'll see "System software from application "" was blocked from loading", click "Allow".

Once installed, launch FortiClient, then check the checkbox and click the "I accept" button. This is needed because this version of FortiClient is the publicly available light version which only has VPN functionality.

In the next screen, you'll need to click on "Configure VPN"

In this screen you'll need to enter the information as seen below and click "Save".

Connection Name: Concordia VPN

Remote Gateway:

Enable Single Sign On(SSO) for VPN Tunnel

Once the VPN connection is created, click "SAML Login".

Enter your Concordia email address and click "Next".

Enter your Concordia password and click "SIGN IN".

You'll be prompted to authorize the login with Multi-Factor Authentication(MFA) using your method of choice.
If you haven't configured Multi-Factor Authentication(MFA) yet please visit:
Multi-factor authentication for faculty and staff
Multi-factor authentication for students

After you've authorized the login with Multi-Factor Authentication(MFA), you'll be asked if you want to stay signed in.

Please use the following instructions:  

  • For those using a personal computer, selecting “yes” will allow you to access your VPN throughout the remainder of the day on your device without the need to re-sign in.  

  • For those using a shared computer, please select “no” when asked to remain signed in. This will ensure that no one can access your VPN when you are no longer using the device. In this case, once you disconnect from the VPN, signing in again will require you to re-enter your credentials.

If you encounter the following error after you've authorized the login with Multi-Factor Authentication(MFA), simply close the window titled "Sign in to your account" with a countdown and click "SAML Login" again and it should connect.

You should then be connected.

Back to top

© Concordia University