Biomateric system authentication issue

Hi,

I'm sorry but 'biometric' is ... ?? - your user name

- your workstation name

- you are member of the group with this name

- second factor in authentication, via some device 

It is good if question is simple, but it still need to have enough info, so other can provide more or less simple answer.

In general, if it is any sort of second factor authentication, like FortiToken, then it usually needs to be active authentication on FortiGate.

However if that biometric second factor is supposed to be handled by Microsoft's AD, then your logon with such feature is most probably handled completely by AD and one of respective Domain Controllers. And then such logon can be seen by FSSO and reported to FortiGate. In this case biometric does not play any role from FortiGate's perspective, as we should get info about logged on user when he succeeds against DC. Logon on DC is completely out of our scope. If logon is OK but there is no FSSO user on FortiGate, then most often such user do not belong to AD user groups monitored by FSSO.