NOTE: You must have MFA authentication setup for your email to use the FortiClient VPN.
Click on the FortiClient Icon on your desktop.
From the FortiClient front page, click on remote access.
Verify that under 'VPN name' it says 'Nolato Contour (US)', then click the 'SAML Login' button. 
When the log-in screen pops up, select your Nolato.com email address.
Open The Microsoft authenticator app on your mobile device and authenticate your log in.
MAKE SURE TO CHECK THE BOX THAT SAYS DON’T ASK AGAIN FOR 30 DAYS. By checking this box, you will only need to authenticate once every 30 days to continue accessing the VPN.
If the log-in was successful, it will display the screen below then it will automatically close the app. (Even if you cannot see the VPN app, it is still working.)
To verify that the FortiClient is connected, click on the caret key in the bottom right corner of the screen and hover over the blue shield with a check mark inside it. It should say 'Connected to Nolato Contour (US)'. If it does not, try following the steps above to log into the VPN again.
To close the VPN, Click on the FortiClient icon on the desktop, go to the remote access tab and press disconnect.