With AnyConnect it is possible to authenticate to RADIUS and let NPS handle which group-policy/tunnel-group the user should receive based on their rights in NPS. Is this possible with Fortigate SSL-VPN and is there anything special needed to configure this besides the NPS itself?
I can't seem to find any documentation about this type of implementation.
Hello,
it is possible to pair users to specific user group defined on FortiGate.
This pairing is for authentication done strictly through Fortinet-Group-Name VSA (vendor specific attribute) AVP (additional value pair).
Using anything else, like Class AVP, is not possible for active authentications.
More details about RADIUS Group Match, as the feature is usually called on FortiOS/FortiGate, kindly refer to this KB:
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
