Technical Tip: How to refresh the FSSO Connector in FortiManager using API

FortiManager can learn user group information from Active Directory using an FSSO Connector. If it has been some time since FortiManager has queried the server, you may wish to bring user group information in FortiManager up-to-date by triggering a new query of the FSSO agent using the FSSO connector.

1. Log in to FortiManager using the CSRF method mentioned in the article: Technical Tip: How to login to FortiManager/FortiAnalyzer using API with CSRF cookies.

2. Use the query below to update the FSSO Connector in FortiManager:

{
    "id": "1",
    "method": "exec",
    "params": [
        {
            "url": "sys/api/fsso",
            "data": {
                "adom": "{{ADOM}}",
                "user_fsso": "{{FSSO_Connector_Name}}"
            }
        }
    ]
}

3. Send the request.

Example response:

4. To check that user groups have been updated, go to: Fabric View -> External Connectors -> Select the FSSO Connector -> Edit -> Lists updated user groups:

The newly fetched/updated FSSO Groups are available to be used under Policy & Objects.

Related documents:

• Creating FSSO connectors
• Technical Tip: Using FortiManager API
• Fortinet Development Network (FNDN)