Technical Tip: How to configure FortiWeb Remote LDAP Adminstrators

A remote LDAP user has been created in Active Directory. Windows Server 2016 as LDAP. A new Active Directory user was created, named: 'pedro'.

FortiWeb Configurations.

1. To configure the Remote LDAP Server:

• Go to User -> Remote Server -> LDAP Server and select 'Create New'. Complete with LDAP information: Name, Server IP / Domain, Server Port, Common Name Identifier, Distinguished, Name, Bind Type: Regular, User DN, Password.

• To detail LDAP configuration refer to: Technical Tip: How to configure a Remote LDAP Server and troubleshooting LDAP test connection

2. Configure Admin user group:

• Go to User -> User Group -> Admin Group -> and select 'Create New'.
• Complete 'Name' Admin Group and select 'OK'.
• Select 'Create New'.

• Select User Type: LDAP User.
• Name: Select created LDAP Server.

3. Configure Administrators:

• Go to System -> Admin -> Administrators, select 'Create New -> Administrator'.
• Complete information: Administrator Name, Type, Admin User Group, Wildcard, Access Profile. 
• 'Admin User Group' is the 'Admin Group' created in step 2.

• Select OK. 

4. Test connection using Remote LDAP user named: 'pedro':

• Go to Log&Report -> Log Access -> Event to see User Authentication log:

Related documents.

Technical Tip: How to configure a Remote LDAP Server and troubleshooting LDAP test connection

Troubleshoot Tip: Cannot create FortiWeb's administrator LDAP users with a point character '.' in the user name

FortiWeb 7.4.5 Administration Guide / Administrators

Technical Tip: How to configure FortiWeb Remote Radius Adminstrators using FortiAuthenticator as Radius Server

Technical Tip: How to configure FortiWeb Remote TACACS+ Adminstrator using FortiAuthenticator as TACACS+ Server