Technical Tip: How to add certificate binding CA in remote user sync rules

Description

This article describes how to correctly add a certificate binding CA in the remote user sync rules.

Scope

FortiAuthenticator.

Solution

Adding certificate binding CA is not possible if the certificate binding common name is not added in the LDAP User Mapping Attributes, for example:

After adding the Certificate binding common name, choose the correct certificate that should bind. Be aware of the green '+' sign on the right side, select it before the safe, if it is not checked, an error like this will appear:

After checking the green '+', the sync rule will be successfully saved: