Technical Note: FortiPortal RADIUS Vendor-Specific Attributes (VSA)
Description
Scope
Solution
This article describes the Vendor-Specific Attributes to configure FortiPortal in a RADIUS Server.
Scope
FortiPortal v4.0
Solution
To configure a RADIUS Server for FortiPortal, add the following vendor-specific attribute to the Fortinet dictionary file:
Then configure VSA for mapping to FortiPortal role:
Multiple roles can be specified by using comma-separated values. Also, note that a user will not be able to login to FortiPortal if the roles are not configured on the RADIUS Server.
To specify the customer identification, configure VSA attribute for mapping to customer profile when using RADIUS authentication:
The RADIUS server will send one of the domain names specified in the Domains field of the customer settings in the value of the VSA
VENDOR 12356 Fortinet
Then configure VSA for mapping to FortiPortal role:
VENDORATTR Fortinet-Fpc-User-Role 40 string
Multiple roles can be specified by using comma-separated values. Also, note that a user will not be able to login to FortiPortal if the roles are not configured on the RADIUS Server.
To specify the customer identification, configure VSA attribute for mapping to customer profile when using RADIUS authentication:
VENDORATTR Fortinet-FPC-Tenant-Identification 41 string
The RADIUS server will send one of the domain names specified in the Domains field of the customer settings in the value of the VSA
